CVE-2015-6419

Published: Dec 12, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

Affected (5)

Products: Cisco: Firesight System Software

Cisco

1 product

Firesight System Software

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Firesight System Software	Version 4.10.3
Cisco Firesight System Software	Version 5.2.0
Cisco Firesight System Software	Version 5.3.0
Cisco Firesight System Software	Version 5.3.1
Cisco Firesight System Software	Version 5.4.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/79033

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-fmc

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/79033

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.