CVE-2016-6435 : The web console in Cisco Firepower Management Center 6.0.1 allows remote authent

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.

Published 2016-10-06 10:59:16

Updated 2017-09-03 01:29:11

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2016-6435

Cisco » Firepower Management Center » Version: 6.0.1
cpe:2.3:a:cisco:firepower_management_center:6.0.1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-6435

EPSS FAQ

81.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2016-6435

Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal

Disclosure Date: 2016-10-10

First seen: 2020-04-26

auxiliary/scanner/http/cisco_firepower_download

This module exploits a directory traversal vulnerability in Cisco Firepower Management under the context of www user. Authentication is required to exploit this vulnerability. Authors: - Matt - sinn3r <sinn3r@metasploit.com>

More information

CVSS scores for CVE-2016-6435

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2016-6435

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-6435

https://www.exploit-db.com/exploits/40464/

Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2

Cisco Firepower Management Center Console Local File Inclusion Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/93421

Cisco Firepower Management Center CVE-2016-6435 Local File Include Vulnerability
https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking

KoreBlog virtual_appliance_spelunking

CVEs referencing this url
https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt

Jump to