- Description
- Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061.
- Source
- psirt@cisco.com
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
- nvd@nist.gov
- CWE-200
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:5.4.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0091657B-E242-4664-8F2F-85B8FCDF3EE8"
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "036E4035-E8E2-4964-A6F4-7292E1804E91"
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D1AFAC1-419D-4ADB-868B-1544BED58B7F"
}
],
"operator": "OR"
}
]
}
]