CVE-2015-6335

Опубликовано: 25 окт. 2015

Источник: nvd

CVSS2: 9

EPSS Низкий

Описание

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc
Vendor Advisory
http://www.securitytracker.com/id/1033873
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc
Vendor Advisory
http://www.securitytracker.com/id/1033873
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:firesight_system_software:5.3.1.7:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system_software:5.4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00342

Низкий

9 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-vmwq-5qfw-x847

github

больше 3 лет назад