Cisco Firepower Threat Management Console Local File Inclusion

vendor:

Firepower Threat Management Console

by:

KoreLogic

6.5

CVSS

MEDIUM

Local File Inclusion

CWE

Product Name: Firepower Threat Management Console

Affected Version From: Cisco Fire Linux OS 6.0.1 (build 37/build 1213)

Affected Version To:

Patch Exists: YES

Related CWE: CVE-2016-6435

CPE: o:cisco:firepower_threat_management_console

Metasploit:

Other Scripts:

Platforms Tested: Embedded Linux

2016

An authenticated user can access arbitrary files on the local system.

Properly filter file path requests to prevent unauthorized access.

Source