CVE-2019-16028: Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper handling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to gain administrative access to the web-based management interface of the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16028?
CVE-2019-16028 is rated as critical due to its potential for allowing unauthenticated remote attackers to gain administrative access.
How do I fix CVE-2019-16028?
To remediate CVE-2019-16028, update the affected Cisco Firepower Management Center software to a version that has addressed this vulnerability.
What impact can CVE-2019-16028 have on my network?
CVE-2019-16028 can lead to unauthorized access and control over devices managed by the affected Cisco software.
Which versions are affected by CVE-2019-16028?
CVE-2019-16028 affects Cisco Firepower Management Center versions up to 6.2.3.16, and versions 6.3.0 through 6.5.0.2.
Who is affected by CVE-2019-16028?
Organizations using affected versions of Cisco Firepower Management Center software are at risk of exploitation through CVE-2019-16028.