CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by directly accessing a generated report file for a different domain that is managed on the same Cisco Secure FMC instance. A successful exploit could allow the attacker to access a previously run report for a different domain, which could allow an attacker to read activity recorded in that domain.
Засегнати продукти
- Cisco Cisco Firepower Management Center: 6.2.3.12; 6.2.3.1; 6.2.3.10; 6.2.3.8; 6.4.0.6; 6.2.3; 6.4.0.7; 6.2.3.13; 6.2.3.5; 6.4.0.4; 6.2.3.9; 6.2.3.14; 6.4.0.1; 6.2.3.6; 6.2.3.11; 6.4.0.8; 6.2.3.2; 6.4.0.2; 6.2.3.3; 6.4.0.3; 6.2.3.7; 6.2.3.4; 6.4.0.5; 6.4.0; 6.2.3.15; 6.6.0; 6.4.0.9; 6.2.3.16; 6.6.0.1; 6.6.1; 6.4.0.10; 6.4.0.11; 6.6.3; 6.6.4; 6.4.0.12; 7.0.0; 6.2.3.17; 7.0.0.1; 6.6.5; 7.0.1; 7.1.0; 6.6.5.1; 6.4.0.13; 7.0.1.1; 6.2.3.18; 6.4.0.14; 6.6.5.2; 7.1.0.1; 7.0.2; 6.4.0.15; 7.2.0; 7.0.2.1; 7.0.3; 6.6.7; 7.1.0.2; 7.2.0.1; 7.0.4; 7.2.1; 7.0.5; 6.4.0.16; 7.3.0; 7.2.2; 6.6.7.1; 7.3.1; 7.2.3; 7.1.0.3; 7.2.3.1; 7.2.4; 7.0.6; 7.2.4.1; 7.2.5; 7.3.1.1; 7.4.0; 6.4.0.17; 7.0.6.1; 7.2.5.1; 7.4.1; 7.2.6; 7.4.1.1; 7.0.6.2; 6.4.0.18; 6.6.7.2; 7.2.7; 7.2.5.2; 7.3.1.2; 7.2.8; 7.6.0; 7.4.2; 7.2.8.1; 7.0.6.3; 7.4.2.1; 7.2.9
Вид слабост
История
- 14 август 2025 Публикувано