Information disclosure in Cisco Secure Firewall Management Center

CVE-2015-6411

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Secure_firewall_management_center — versions 5.4.1.3, 6.0.0, 6.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)