CVEvulnerability
CVE-2015-6335
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.
Affected configurations
• cisco firesight system software 5.3.1.7
• cisco firesight system software 5.4.0.4
• cisco firesight system software 6.0.0
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc Vendor Advisory
- http://www.securitytracker.com/id/1033873 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc Vendor Advisory
- http://www.securitytracker.com/id/1033873 Third Party Advisory, VDB Entry