Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Cisco FireSIGHT System Software Multiple Vulnerabilities
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
A vulnerability in credential authentication for valid and invalid username-password pairs for Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to determine a list of valid usernames for an affected device. A vulnerability in the HTTP web-based management interface of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system.
Insight
Insight
The XSS vulnerability is due to improper sanitization of parameter values. The Convert Timing Channel Vulnerability is due to implementation details of how system credentials are verified by the affected software.
Affected Software
Affected Software
Cisco FireSIGHT System Software Release 6.1.0 is vulnerable.
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
See vendor advisory