CVE-2024-20388
Vulnerability from cvelistv5
Published
2024-10-23 17:35
Modified
2024-10-24 16:24
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset.
References
ykramarz@cisco.comhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-infodisc-RL4mJFerVendor Advisory
Impacted products
CiscoCisco Firepower Management Center
CiscoCisco Firepower Threat Defense Software
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firepower_management_center",
            "vendor": "cisco",
            "versions": [
              {
                "lessThanOrEqual": "6.2.3.18",
                "status": "affected",
                "version": "6.2.3",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "6.4.0.18",
                "status": "affected",
                "version": "6.4.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "6.6.7.2",
                "status": "affected",
                "version": "6.6.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "6.7.0.3",
                "status": "affected",
                "version": "6.7.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "7.0.6.2",
                "status": "affected",
                "version": "7.0.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "7.1.0.3",
                "status": "affected",
                "version": "7.1.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "7.2.8.1",
                "status": "affected",
                "version": "7.2.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "7.3.1.2",
                "status": "affected",
                "version": "7.3.0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "7.4.1.1",
                "status": "affected",
                "version": "7.4.0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firepower_threat_defense_software",
            "vendor": "cisco",
            "versions": [
              {
                "lessThanOrEqual": "6.4.0.18",
                "status": "affected",
                "version": "6.4.0.4",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "6.6.7",
                "status": "affected",
                "version": "6.6.5.1",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "6.7.0.2"
              },
              {
                "lessThanOrEqual": "7.1.0.3",
                "status": "affected",
                "version": "7.1.0.1",
                "versionType": "custom"
              },
              {
                "status": "affected",
                "version": "7.2.2"
              },
              {
                "status": "affected",
                "version": "7.4.1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-23T18:45:56.491861Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-24T16:24:24.678Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Firepower Management Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "6.2.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.1"
            },
            {
              "status": "affected",
              "version": "6.2.3.2"
            },
            {
              "status": "affected",
              "version": "6.2.3.3"
            },
            {
              "status": "affected",
              "version": "6.2.3.4"
            },
            {
              "status": "affected",
              "version": "6.2.3.5"
            },
            {
              "status": "affected",
              "version": "6.2.3.6"
            },
            {
              "status": "affected",
              "version": "6.2.3.7"
            },
            {
              "status": "affected",
              "version": "6.2.3.9"
            },
            {
              "status": "affected",
              "version": "6.2.3.10"
            },
            {
              "status": "affected",
              "version": "6.2.3.11"
            },
            {
              "status": "affected",
              "version": "6.2.3.12"
            },
            {
              "status": "affected",
              "version": "6.2.3.13"
            },
            {
              "status": "affected",
              "version": "6.2.3.14"
            },
            {
              "status": "affected",
              "version": "6.2.3.15"
            },
            {
              "status": "affected",
              "version": "6.2.3.8"
            },
            {
              "status": "affected",
              "version": "6.2.3.16"
            },
            {
              "status": "affected",
              "version": "6.2.3.17"
            },
            {
              "status": "affected",
              "version": "6.2.3.18"
            },
            {
              "status": "affected",
              "version": "6.4.0"
            },
            {
              "status": "affected",
              "version": "6.4.0.1"
            },
            {
              "status": "affected",
              "version": "6.4.0.3"
            },
            {
              "status": "affected",
              "version": "6.4.0.2"
            },
            {
              "status": "affected",
              "version": "6.4.0.4"
            },
            {
              "status": "affected",
              "version": "6.4.0.5"
            },
            {
              "status": "affected",
              "version": "6.4.0.6"
            },
            {
              "status": "affected",
              "version": "6.4.0.7"
            },
            {
              "status": "affected",
              "version": "6.4.0.8"
            },
            {
              "status": "affected",
              "version": "6.4.0.9"
            },
            {
              "status": "affected",
              "version": "6.4.0.10"
            },
            {
              "status": "affected",
              "version": "6.4.0.11"
            },
            {
              "status": "affected",
              "version": "6.4.0.12"
            },
            {
              "status": "affected",
              "version": "6.4.0.13"
            },
            {
              "status": "affected",
              "version": "6.4.0.14"
            },
            {
              "status": "affected",
              "version": "6.4.0.15"
            },
            {
              "status": "affected",
              "version": "6.4.0.16"
            },
            {
              "status": "affected",
              "version": "6.4.0.17"
            },
            {
              "status": "affected",
              "version": "6.4.0.18"
            },
            {
              "status": "affected",
              "version": "6.6.0"
            },
            {
              "status": "affected",
              "version": "6.6.0.1"
            },
            {
              "status": "affected",
              "version": "6.6.1"
            },
            {
              "status": "affected",
              "version": "6.6.3"
            },
            {
              "status": "affected",
              "version": "6.6.4"
            },
            {
              "status": "affected",
              "version": "6.6.5"
            },
            {
              "status": "affected",
              "version": "6.6.5.1"
            },
            {
              "status": "affected",
              "version": "6.6.5.2"
            },
            {
              "status": "affected",
              "version": "6.6.7"
            },
            {
              "status": "affected",
              "version": "6.6.7.1"
            },
            {
              "status": "affected",
              "version": "6.6.7.2"
            },
            {
              "status": "affected",
              "version": "6.7.0"
            },
            {
              "status": "affected",
              "version": "6.7.0.1"
            },
            {
              "status": "affected",
              "version": "6.7.0.2"
            },
            {
              "status": "affected",
              "version": "6.7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.0.6.1"
            },
            {
              "status": "affected",
              "version": "7.0.6.2"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.3.1"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.2.5.1"
            },
            {
              "status": "affected",
              "version": "7.2.6"
            },
            {
              "status": "affected",
              "version": "7.2.7"
            },
            {
              "status": "affected",
              "version": "7.2.5.2"
            },
            {
              "status": "affected",
              "version": "7.2.8"
            },
            {
              "status": "affected",
              "version": "7.2.8.1"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            },
            {
              "status": "affected",
              "version": "7.4.0"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            },
            {
              "status": "affected",
              "version": "7.4.1.1"
            }
          ]
        },
        {
          "product": "Cisco Firepower Threat Defense Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "6.6.5.1"
            },
            {
              "status": "affected",
              "version": "6.6.7"
            },
            {
              "status": "affected",
              "version": "6.4.0.4"
            },
            {
              "status": "affected",
              "version": "6.4.0.10"
            },
            {
              "status": "affected",
              "version": "6.4.0.12"
            },
            {
              "status": "affected",
              "version": "6.4.0.14"
            },
            {
              "status": "affected",
              "version": "6.4.0.16"
            },
            {
              "status": "affected",
              "version": "6.4.0.18"
            },
            {
              "status": "affected",
              "version": "6.7.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.4.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device.\r\n\r This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerabilities that are described in this advisory.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-202",
              "description": "Exposure of Sensitive Information Through Data Queries",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-23T17:35:24.772Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-fmc-xss-infodisc-RL4mJFer",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-infodisc-RL4mJFer"
        }
      ],
      "source": {
        "advisory": "cisco-sa-fmc-xss-infodisc-RL4mJFer",
        "defects": [
          "CSCwj03056"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20388",
    "datePublished": "2024-10-23T17:35:24.772Z",
    "dateReserved": "2023-11-08T15:08:07.658Z",
    "dateUpdated": "2024-10-24T16:24:24.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-20388\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2024-10-23T18:15:07.697\",\"lastModified\":\"2024-11-05T16:07:36.680\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device.\\r\\n\\r This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la funci\u00f3n de cambio de contrase\u00f1a del software Cisco Firepower Management Center (FMC) podr\u00eda permitir que un atacante remoto no autenticado determine nombres de usuario v\u00e1lidos en un dispositivo afectado. Esta vulnerabilidad se debe a una autenticaci\u00f3n incorrecta de las respuestas de actualizaci\u00f3n de contrase\u00f1a. Un atacante podr\u00eda aprovechar esta vulnerabilidad al forzar el restablecimiento de contrase\u00f1a en un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante determinar nombres de usuario v\u00e1lidos en la respuesta no autenticada a un restablecimiento forzado de contrase\u00f1a.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-202\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB01FA17-68F7-47E6-9D94-AC3C290F62AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08F0F58D-C859-400F-88D4-38C84584BACF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D28E1C-B26F-4BD8-8F21-2AFA1E1B881D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DF3D576-7922-4FB4-9C8B-2E31E29A4FEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE852669-316E-4710-A964-91B17CBA75FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D64651BA-33A1-4DD9-B23C-577543D45534\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E44687A2-D460-4CD7-91E1-4535B4A71698\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C312686-8739-4B48-9476-3D65200B3216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"059D7FFF-94B6-400A-A939-498BDBB18FED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4204464-BF24-4596-8AE2-4D98EC817234\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF0B67CC-FFEA-4A22-A79F-6DB1C826CECE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13744A3B-7F48-49B1-8263-012456E27ACD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E0CC829-ED28-435B-9826-6CDB4BB2F0EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1732AC85-09E3-43E2-B624-87E537EB6F03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85986C19-4819-4F02-9873-A42D4277D3A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11BEDD8B-DB02-4E8D-B2BF-2B7BE190AF6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0E13E7F-BDA9-49DF-BA43-CB812BC0D384\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47FDAAB6-EC1B-4759-8B8A-55748C39AFFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.2.3.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3C97C0B-509E-4AE2-9EDB-BDC0436E05A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA61E6F5-FFFD-4D4E-9AA3-94F827A79F4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80EC515D-6051-472A-92F4-ED4385FEDEC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7E83830-B9CA-425D-BFD3-7F8FD1114950\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91F862F9-40FE-42E9-86B2-BD9350B118D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"857A0C11-1456-4F1A-A812-E93B829F13DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93828989-2731-4DCE-9FBB-5ABB5A660A9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83B99522-B80A-4998-971B-F3C45EB104F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F286FD7B-E588-4DCC-B41F-AD9E4A49B8ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3908BF04-0869-4F4D-9BC4-411F56AC8092\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"227799AC-75DF-4B3F-A7EF-063D8D8C2EC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB72A64E-7B19-4A96-809C-287E391DFA44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4630DEB7-BEE7-4247-9536-C35887A807C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E7BC07A-1C33-46FB-9ABF-C98A46BE6AD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3B8077-2DD6-491F-9F0E-D977E7A4AB08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEAD4CD3-FBF1-43BC-A14F-6375E4B784AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5662EBCF-13F5-4CE6-8E3D-B23B73AF4633\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"817E7CDB-5CDC-44A9-92D0-4364A08302BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A95D8B6-2D90-4EA8-B468-356EB396A273\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.4.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CDEF2CC-D485-4E66-9818-7C9740F37840\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30AE7CB7-86F5-4B80-9179-1C2DF4E8E7B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1931C431-3452-4FE1-870A-16700553BDAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"490C91AC-9437-43DA-99AF-0DF8A0E5EEB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22913221-9B69-451A-8442-C65091DFAFD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1488A64D-E0ED-4E88-92E9-D8E38A2CB080\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FF58049-7F1B-425B-A2A7-5974080625F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DA72515-66E1-4811-ADDA-B2F9B6A4B737\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"606C631F-5A30-4A07-A761-29B31D09C66A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DA2A011-FAE4-4741-AA37-1F4F17471381\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B57A678-E534-472C-8B45-F6A1E027248C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.6.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D748B16-1C2A-4E00-807F-647569C271D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"853866E2-1BCC-4A81-907A-ABA8648D8C57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B0B5925-0336-4F56-9D9A-777687DF3B22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F406CDA3-08B9-4C13-B6F5-C83978239623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:6.7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"108BFA85-BB6B-420A-911D-B2731CB05289\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FEE4092-0EAD-48DA-92EB-82DD4EB43E49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B8DF2E2-848A-4616-AEF0-1EFE68A900C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"387E34BD-913B-4CB7-9230-81B283E92A9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE8B3DC-9865-4845-B989-FB41D6FE085E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC98B2C9-2F78-4DB5-97D7-78D584CEBE87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44CEED06-6E18-4961-BD69-8BF3E7A6D59C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D815D562-D60A-4AD1-9243-8167B244882E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA91AC4A-77D5-4C41-BD63-4E8F3BA4FF84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5808D1C-6D6E-403D-8904-147B66B50385\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD9A750B-7C84-484C-94F3-FB66EF6296E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62950A6C-8467-4215-BCD1-010B8C491714\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.0.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D97494F-BA89-4E95-A01F-C2CE02505A27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21D28D33-2B3C-4695-9137-7C4AC6BA2D7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DCA8FE8-D0BC-4B6C-8E15-0DC5D0EF515F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62213974-B025-4A76-87CD-025C84389A2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.1.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A876A2A0-0973-481C-A63A-1A5761015308\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6671431-4FE3-4D7D-9F46-445A1A6B7EEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2757987-7648-4BE1-AE91-99F1FC95C8C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"841C3C05-7289-46CC-A610-5A5BFC81FD42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91599B30-27D5-450A-A565-A65BF940C30C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71802FFD-A173-4F21-87C8-495D8F95A176\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B9CD6DE-EE1E-4FF4-8DF5-7F9DA36AFCFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0EF1B4E-3E42-4C42-9981-2BC17F22BA2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30E26E7E-F6D8-4A89-85F7-42FCB0E37AD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2A7E707-6CBB-42E3-BE90-72E835156DB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BB537CA-0E37-471E-8DD3-7710A443224A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9022BCA-EDBF-4FD1-B427-573CA07E5134\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23BA0BE4-B06D-45AE-9C9D-280F1BFA7EDA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B79ABCC-C95B-45AB-BE9D-454BD8174651\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4FD7D25-704B-47EB-AF36-DC684AD07807\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.2.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D33E431-39F5-4F73-99A1-19A05A594C90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A6F69A3-E15F-43C9-8B9C-A30E057C4FD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"602535DE-ED32-4805-85EF-940955459B34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.3.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17727E39-1612-4433-AC23-CBC852B392C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.3.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5894CEC-AB1C-44F2-A977-FE74897A24A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"579DC0CE-1CEA-449F-BF76-AD7087573ACD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB3E28C0-675B-4C30-B248-BE1EB5E961C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_management_center:7.4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C7E7A89-A9CA-45DA-8378-A50B1F9D260E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24CD0B0A-2B91-45DD-9522-8D1D3850CC9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2A5530C-DF29-421B-9712-3454C1769446\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B05791F9-0B31-4C4C-A9BA-9268CAA45FB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6D7AF29-4E08-4BFD-AFE0-994309E66F08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6E3A5DC-A237-46E4-A4E5-F135482F984A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CE51492-8C9B-459E-9F80-64F426009905\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55FE024D-0D43-40AD-9645-8C54ECF17824\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D46E2E00-BA86-4002-B67B-2C1A6C1AAAE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"596EC5DD-D7F4-44C8-B4B5-E2DC142FC486\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"469EA365-DED5-4436-AAC2-5553529DE700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5364CB94-BEA3-4E9A-A2F9-EE96A2D7F8AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:7.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"795ED164-7800-4D50-8E37-665BE30190D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:firepower_threat_defense:7.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"724A3B6F-DDAB-4A2F-8430-9E1F352D755F\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-infodisc-RL4mJFer\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.