CVE-2015-6368 — Sensitive Information Exposure in Cisco Firepower Extensible Operating System

CWE-200 — Sensitive Information ExposureCWE-2644 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.1%
top 75.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Firepower Extensible Operating System
Timeline
PublishedNov 19
Latest updateMay 17

Description

Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID CSCux10608.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-gm6g-v46p-p26m: Cisco Firepower Extensible Operating System 1↗2022-05-17
▶
CVEList
CVE-2015-6368: Cisco Firepower Extensible Operating System 1↗2015-11-19
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower 9000 Unauthenticated File Access Vulnerability↗2015-11-16
▶
CVE-2015-6368 — Sensitive Information Exposure in Cisco | cvebase