← Back

CVE-2016-6417

nvd nist
Published: Oct 5, 2016Modified: May 6, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.

Affected (70)

1 product
Firesight System Software
Configuration A
70 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 4.10.2.1
Version 4.10.2.2
Version 4.10.2.3
Version 4.10.2.4
Version 4.10.2.5
Version 4.10.2
Version 4.10.3.10
Version 4.10.3.1
Version 4.10.3.2
Version 4.10.3.3
Version 4.10.3.4
Version 4.10.3.5
Version 4.10.3.6
Version 4.10.3.7
Version 4.10.3.8
Version 4.10.3.9
Version 4.10.3
Version 5.1.0.1
Version 5.1.0.2
Version 5.1.0.3
Version 5.1.0
Version 5.1.1.10
Version 5.1.1.11
Version 5.1.1.1
Version 5.1.1.2
Version 5.1.1.3
Version 5.1.1.4
Version 5.1.1.5
Version 5.1.1.6
Version 5.1.1.8
Version 5.1.1.9
Version 5.1.1
Version 5.2.0.1
Version 5.2.0.2
Version 5.2.0.3
Version 5.2.0.4
Version 5.2.0.5
Version 5.2.0.6
Version 5.2.0.8
Version 5.2.0
Version 5.3.0.1
Version 5.3.0.2
Version 5.3.0.3
Version 5.3.0.4
Version 5.3.0.5
Version 5.3.0.6
Version 5.3.0.7
Version 5.3.0
Version 5.3.1.1
Version 5.3.1.2
Version 5.3.1.3
Version 5.3.1.4
Version 5.3.1.5
Version 5.3.1.7
Version 5.3.1
Version 5.4.0.1
Version 5.4.0.2
Version 5.4.0.3
Version 5.4.0.4
Version 5.4.0.5
Version 5.4.0.6
Version 5.4.0
Version 5.4.1.2
Version 5.4.1.3
Version 5.4.1.4
Version 5.4.1
Version 6.0.0.1
Version 6.0.0
Version 6.0.1
Version 6.1.0

References (6)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.