CVE-2015-6335

Published: Oct 25, 2015Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.

Affected (3)

Products: Cisco: Firesight System Software

1 product

Firesight System Software

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Firesight System Software	Version 5.3.1.7
Cisco Firesight System Software	Version 5.4.0.4
Cisco Firesight System Software	Version 6.0.0

Related CWEs

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033873

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033873

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.