cisco-sa-fmc-redirect-NYDuSEQn: Cisco Firepower Management Center Software Open Redirect Vulnerability
First published: Wed Oct 21 2020(Updated: )
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting an HTTP request from a user. A successful exploit could allow the attacker to modify the HTTP request to cause the interface to redirect the user to a specific, malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-redirect-NYDuSEQn
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-fmc-redirect-NYDuSEQn?
The severity of cisco-sa-fmc-redirect-NYDuSEQn is classified as high due to the potential for unauthenticated remote attacks.
How do I fix cisco-sa-fmc-redirect-NYDuSEQn?
To fix cisco-sa-fmc-redirect-NYDuSEQn, apply the latest security updates provided by Cisco for Firepower Management Center Software.
What kind of attack does cisco-sa-fmc-redirect-NYDuSEQn enable?
cisco-sa-fmc-redirect-NYDuSEQn enables an unauthenticated remote attacker to redirect users to a malicious web page.
What versions of Cisco software are affected by cisco-sa-fmc-redirect-NYDuSEQn?
cisco-sa-fmc-redirect-NYDuSEQn affects Cisco Firepower Management Center Software across various versions.
Is user interaction required for cisco-sa-fmc-redirect-NYDuSEQn exploitation?
No, user interaction is not required for the exploitation of cisco-sa-fmc-redirect-NYDuSEQn, making it particularly dangerous.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firepower management center