Vulnerability in Cisco Firesight System Software

CVE-2015-6335

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.

EPSS: 0.027 (84.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Firesight_system_software — versions 5.3.1.7, 5.4.0.4, 6.0.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)