Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20744

Опубликовано: 03 мая 2022
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view data without proper authorization. This vulnerability exists because of a protection mechanism that relies on the existence or values of a specific input. An attacker could exploit this vulnerability by modifying this input to bypass the protection mechanism and sending a crafted request to an affected device. A successful exploit could allow the attacker to view data beyond the scope of their authorization.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*
Версия до 7.1.0 (исключая)

EPSS

Процентиль: 40%
0.00184
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-807
NVD-CWE-Other

Связанные уязвимости

CVSS3: 6.5
github
почти 4 года назад

A vulnerability in the input protection mechanisms of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view data without proper authorization. This vulnerability exists because of a protection mechanism that relies on the existence or values of a specific input. An attacker could exploit this vulnerability by modifying this input to bypass the protection mechanism and sending a crafted request to an affected device. A successful exploit could allow the attacker to view data beyond the scope of their authorization.

CVSS3: 4.3
fstec
почти 4 года назад

Уязвимость механизма защиты ввода программного обеспечения администрирования сети Cisco Firepower Management Center (FMC), позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 40%
0.00184
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-807
NVD-CWE-Other