What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-20744.

What is the severity level of CVE-2022-20744?

CVE-2022-20744 has a severity level of medium.

What software is affected by CVE-2022-20744?

Cisco Firepower Management Center (FMC) Software up to version 7.1.0 is affected by CVE-2022-20744.

How can an attacker exploit CVE-2022-20744?

An authenticated, remote attacker can exploit CVE-2022-20744 to view data without proper authorization.

Is there a fix available for CVE-2022-20744?

A fix for CVE-2022-20744 may be provided by Cisco in their security advisory.

Vulnerability/
CVE-2022-20744

medium

6.5

CWE

807

3/5/2022

6/11/2024

CVE-2022-20744: Cisco Firepower Management Center Software Information Disclosure Vulnerability

First published: Tue May 03 2022(Updated: )

A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view data without proper authorization. This vulnerability exists because of a protection mechanism that relies on the existence or values of a specific input. An attacker could exploit this vulnerability by modifying this input to bypass the protection mechanism and sending a crafted request to an affected device. A successful exploit could allow the attacker to view data beyond the scope of their authorization.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Firepower Management Center	<7.1.0

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-infdisc-guJWRwQu

Frequently Asked Questions

What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-20744.
What is the severity level of CVE-2022-20744?
CVE-2022-20744 has a severity level of medium.
What software is affected by CVE-2022-20744?
Cisco Firepower Management Center (FMC) Software up to version 7.1.0 is affected by CVE-2022-20744.
How can an attacker exploit CVE-2022-20744?
An authenticated, remote attacker can exploit CVE-2022-20744 to view data without proper authorization.
Is there a fix available for CVE-2022-20744?
A fix for CVE-2022-20744 may be provided by Cisco in their security advisory.

collector/nvd-index
agent/author
agent/type
agent/softwarecombine
agent/weakness
agent/references
agent/description
collector/nvd-api
agent/software-canonical-lookup-request
collector/mitre-cve
source/MITRE
agent/severity
agent/title
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
vendor/cisco
canonical/cisco firepower management center

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.