Vulnslist

find the latest Cisco vulnerabilities

Cisco Firepower Management Center Information Disclosure Vulnerability

cisco-sa-fmc-infodisc-RJdktM6f · Medium · Published · Updated

A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-infodisc-RJdktM6f

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2021-1126
Cisco Bug IDsCSCvp40452, CSCvh67867
CVSS ScoreBase 5.5
Base 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Firepower Management Center Base, Cisco Firepower Management Center 5.4.1.3, Cisco Firepower Management Center 5.4.1.5, Cisco Firepower Management Center 5.4.1.4, Cisco Firepower Management Center 5.4.1.2, Cisco Firepower Management Center 5.4.1.1, Cisco Firepower Management Center 5.4.1, Cisco Firepower Management Center 5.4.0, Cisco Firepower Management Center 5.4.0.2, Cisco Firepower Management Center 5.4.1.6, Cisco Firepower Management Center 5.4.1.9, Cisco Firepower Management Center 6.0.0, Cisco Firepower Management Center 6.0.1, Cisco Firepower Management Center 6.0.0.1, Cisco Firepower Management Center 6.0.0.0, Cisco Firepower Management Center 6.0.1.1, Cisco Firepower Management Center 6.0.1.3, Cisco Firepower Management Center 6.0.1.2, Cisco Firepower Management Center 6.0.1.4, Cisco Firepower Management Center 5.3.0.2, Cisco Firepower Management Center 5.3.1.6, Cisco Firepower Management Center 5.3.1.5, Cisco Firepower Management Center 5.3.1.4, Cisco Firepower Management Center 5.3.1.3, Cisco Firepower Management Center 5.3.0.3, Cisco Firepower Management Center 5.3.0, Cisco Firepower Management Center 5.3.1, Cisco Firepower Management Center 5.3.0.4, Cisco Firepower Management Center 5.3.1.7, Cisco Firepower Management Center 6.1.0, Cisco Firepower Management Center 6.1.0.2, Cisco Firepower Management Center 6.1.0.1, Cisco Firepower Management Center 6.1.0.3, Cisco Firepower Management Center 6.1.0.4, Cisco Firepower Management Center 6.1.0.5, Cisco Firepower Management Center 6.1.0.6, Cisco Firepower Management Center 6.1.0.7, Cisco Firepower Management Center 5.2.0, Cisco Firepower Management Center 4.10.3, Cisco Firepower Management Center 4.10.3.9, Cisco Firepower Management Center 2.9.0, Cisco Firepower Management Center 2.9.7.10, Cisco Firepower Management Center 6.2.0, Cisco Firepower Management Center 6.2.1, Cisco Firepower Management Center 6.2.2, Cisco Firepower Management Center 6.2.0.2, Cisco Firepower Management Center 6.2.0.1, Cisco Firepower Management Center 6.2.0.3, Cisco Firepower Management Center 6.2.0.4, Cisco Firepower Management Center 6.2.0.5, Cisco Firepower Management Center 6.2.0.6, Cisco Firepower Management Center 6.2.0.7, Cisco Firepower Management Center 6.2.2.1, Cisco Firepower Management Center 6.2.2.2, Cisco Firepower Management Center 6.2.2.3, Cisco Firepower Management Center 6.2.2.4, Cisco Firepower Management Center 6.2.3, Cisco Firepower Management Center 6.2.3.1, Cisco Firepower Management Center 6.2.3.2, Cisco Firepower Management Center 6.2.3.3, Cisco Firepower Management Center 6.2.3.4, Cisco Firepower Management Center 6.2.3.5, Cisco Firepower Management Center 6.2.3.6, Cisco Firepower Management Center 6.2.3.7, Cisco Firepower Management Center 6.2.3.9, Cisco Firepower Management Center 6.2.3.10, Cisco Firepower Management Center 6.2.3.11, Cisco Firepower Management Center 6.2.3.12, Cisco Firepower Management Center 6.2.3.13, Cisco Firepower Management Center 6.2.3.14, Cisco Firepower Management Center 6.2.2.5, Cisco Firepower Management Center 6.2.3.15, Cisco Firepower Management Center 6.2.3.8, Cisco Firepower Management Center 6.2.3.16, Cisco Firepower Management Center 6.3.0, Cisco Firepower Management Center 6.3.0.1, Cisco Firepower Management Center 6.3.0.2, Cisco Firepower Management Center 6.3.0.3, Cisco Firepower Management Center 6.3.0.4, Cisco Firepower Management Center 6.3.0.5, Cisco Firepower Management Center 6.4.0, Cisco Firepower Management Center 6.4.0.1, Cisco Firepower Management Center 6.4.0.3, Cisco Firepower Management Center 6.4.0.2, Cisco Firepower Management Center 6.4.0.4, Cisco Firepower Management Center 6.4.0.5, Cisco Firepower Management Center 6.4.0.6, Cisco Firepower Management Center 6.4.0.7, Cisco Firepower Management Center 6.4.0.8, Cisco Firepower Management Center 6.4.0.9, Cisco Firepower Management Center 6.4.0.10, Cisco Firepower Management Center 6.5.0, Cisco Firepower Management Center 6.5.0.1, Cisco Firepower Management Center 6.5.0.2, Cisco Firepower Management Center 6.5.0.3, Cisco Firepower Management Center 6.5.0.4, Cisco Firepower Management Center 6.6.0, Cisco Firepower Management Center 6.6.0.1, Cisco Firepower Management Center 6.6.1, Cisco Secure Firewall Management Center (FMC)

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2021-1126 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2021-1126 Cisco OpenVuln
Cisco Secure Firewall Management Center (FMC) CVE-2021-1126 Cisco OpenVuln
Cisco Firepower Management Center CVE-2021-1126 Cisco OpenVuln