Lucene search

K
cveCiscoCVE-2015-0773
HistoryJun 12, 2015 - 10:59 a.m.

CVE-2015-0773

2015-06-1210:59:02
CWE-264
cisco
web.nvd.nist.gov
33
cisco
firesight
system software
bug id
cscut67078
remote authenticated users
vpn deletion request
security vulnerability
cve-2015-0773
nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

44.2%

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user’s dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078.

Affected configurations

Nvd
Node
ciscofiresight_system_softwareMatch5.3.1.1
OR
ciscofiresight_system_softwareMatch6.0.0
VendorProductVersionCPE
ciscofiresight_system_software5.3.1.1cpe:2.3:a:cisco:firesight_system_software:5.3.1.1:*:*:*:*:*:*:*
ciscofiresight_system_software6.0.0cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

44.2%

Related for CVE-2015-0773