CVE-2016-6420: Infoleak
Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6420?
CVE-2016-6420 is considered a high severity vulnerability due to its potential to allow unauthorized privilege escalation.
How do I fix CVE-2016-6420?
To fix CVE-2016-6420, upgrade your Cisco FireSIGHT System Software to a patched version beyond 5.4.0.
Who is affected by CVE-2016-6420?
Remote authenticated users of Cisco FireSIGHT System Software versions 4.10.3 through 5.4.0 are affected by CVE-2016-6420.
What impacts does CVE-2016-6420 have?
CVE-2016-6420 can lead to unauthorized access and privilege escalation for attackers with valid credentials.
Is there a workaround for CVE-2016-6420?
There are no known workarounds for CVE-2016-6420; upgrading to a secure version is recommended.