CVE-2016-6471: Infoleak
Published Dec 14, 2016
·Updated
A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6.
Affected Software
1 affected component
cisco FireSIGHT System software=5.4.1.6
Event History
Dec 14, 2016
CVE Published
via MITRE·12:37 AM
Data Sourced
via MITRE·12:37 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-6471?
CVE-2016-6471 has a medium severity rating as it allows remote viewing of sensitive information.
2
How do I fix CVE-2016-6471?
To fix CVE-2016-6471, upgrade the Cisco FireSIGHT System Software to a version later than 5.4.1.6.
3
Who is affected by CVE-2016-6471?
CVE-2016-6471 affects users of Cisco FireSIGHT System Software version 5.4.1.6.
4
Can CVE-2016-6471 be exploited remotely?
Yes, CVE-2016-6471 can be exploited remotely by an authenticated attacker.
5
What does CVE-2016-6471 allow an attacker to do?
CVE-2016-6471 allows an authenticated attacker to view the Remote Storage Password.