CVE-2016-6435: Infoleak
Published Oct 6, 2016
·Updated
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.
Affected Software
2 affected components
Cisco Secure Firewall Management Center=6.0.1
Cisco FirePOWER Management Center=6.0.1
Event History
Oct 6, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6435?
CVE-2016-6435 has a medium severity rating, allowing unauthorized file access by authenticated users.
2
How do I fix CVE-2016-6435?
To fix CVE-2016-6435, upgrade your Cisco Firepower Management Center to a patched version that addresses this vulnerability.
3
Who is affected by CVE-2016-6435?
CVE-2016-6435 affects users of Cisco Secure Firewall Management Center and Cisco Firepower Management Center running version 6.0.1.
4
What type of attack does CVE-2016-6435 facilitate?
CVE-2016-6435 facilitates unauthorized access to arbitrary files on the system through crafted parameters.
5
Is remote access required to exploit CVE-2016-6435?
Yes, successful exploitation of CVE-2016-6435 requires that the attacker has remote authenticated access to the web console.