SB2017060810 - Information disclosure in Cisco Firepower Management Center
Published: June 8, 2017
Security Bulletin ID
SB2017060810
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2017-6673)
The vulnerability allows a remote authenticated attacker to obtain potentially sensitive information.The weakness exists in the Cisco Firepower Management Center logging function due to verbose output in HTTP log files. A remote attacker can retrieve the log files from an affected system and use the information to perform reconnaissance and conduct further attacks.
Successful exploitation of the vulnerability results in information disclosure.
Remediation
Install update from vendor's website.