CVE-2016-6411: Input Validation
Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6411?
CVE-2016-6411 has a medium severity rating due to its potential to allow remote attackers to bypass security settings.
How do I fix CVE-2016-6411?
To fix CVE-2016-6411, upgrade to a patched version of Cisco Firepower Management Center and FireSIGHT System Software.
Which versions are affected by CVE-2016-6411?
CVE-2016-6411 specifically affects Cisco FireSIGHT System Software version 6.0.1.
What is the impact of CVE-2016-6411?
The impact of CVE-2016-6411 is that it allows remote attackers to bypass do-not-decrypt settings through crafted URLs.
What is the nature of the vulnerability described in CVE-2016-6411?
CVE-2016-6411 involves mishandling comparisons between URLs and X.509 certificates.