CVE-2020-3311: Cisco Firepower Management Center Open Redirect Vulnerability
A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a specific malicious web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3311?
CVE-2020-3311 is rated as a high severity vulnerability.
How do I fix CVE-2020-3311?
To fix CVE-2020-3311, upgrade to a version of Cisco Firepower Management Center Software later than 6.3.0.
What is the impact of CVE-2020-3311?
The impact of CVE-2020-3311 is that it allows unauthenticated remote attackers to redirect users to a malicious web page.
Who is affected by CVE-2020-3311?
CVE-2020-3311 affects users of Cisco Secure Firewall Management Center and Cisco Firepower Management Center Software versions up to 6.3.0.
What causes CVE-2020-3311?
CVE-2020-3311 is caused by improper input validation of HTTP request parameters in the web interface of Cisco Firepower Management Center.