CVE-2019-1982 — Incorrect Default Permissions in Cisco

Vendor	Product	Version range	Fixed in
cisco	cisco_firepower_management_center	>= unspecified < n/a	n/a
cisco	firepower_threat_defense	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—

GHSA

GHSA-fjww-f977-qh4x: A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cis

ghsa_unreviewed·2022-05-24

CVE-2019-1982 [MEDIUM] CWE-276 GHSA-fjww-f977-qh4x: A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cis A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would otherwise be blocked.

Cisco

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability

vendor_cisco·2019-08-16·CVSS 5.8

CVE-2019-1982 [MEDIUM] CWE-264 Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would otherwise be blocke

Cisco

Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability

vendor_cisco·CVSS 3.0

CVE-2019-1982 Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability CVE-2019-1982: Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would other

CVE-2019-1982: A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco…

Affected

CVSS provenance