CVE-2015-6371 — Sensitive Information Exposure in Cisco Firepower Extensible Operating System

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
4.0MEDIUMNVD
EPSS
0.2%
top 60.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Firepower Extensible Operating System
Timeline
PublishedNov 19
Latest updateMay 17

Description

Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka Bug ID CSCux10621.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qpr8-p974-723p: Cisco Firepower Extensible Operating System 1↗2022-05-17
▶
CVEList
CVE-2015-6371: Cisco Firepower Extensible Operating System 1↗2015-11-19
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower 9000 Arbitrary File Read Access Script Vulnerability↗2015-11-17
▶
CVE-2015-6371 — Sensitive Information Exposure in Cisco | cvebase