漏洞标题
N/A
漏洞描述信息
"Cisco 火Power Management Center 4.x、5.x 之前的 5.3.0.3、5.3.1.x、5.3.1.2 和 5.4.x 以及 Cisco 5500-X 设备上的 Cisco Adaptive Security Appliance (ASA) Software 允许通过编写的 HTTP 请求增加用户账户权限,也就是 bug ID CSCur25483。"
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 allows remote authenticated users to increase user-account privileges via crafted HTTP requests, aka Bug ID CSCur25483.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Cisco Firepower Management Center和ASA 5500-X Series with FirePOWER Services 提权漏洞
漏洞描述信息
Cisco Firepower Management Center和Cisco ASA 5500-X Series with FirePOWER Services都是美国思科(Cisco)公司的新一代防火墙软件。 Cisco Firepower Management Center和Cisco ASA 5500-X Series with FirePOWER Services中的web-based GUI存在提权漏洞。远程攻击者可通过发送HTTP请求利用该漏洞获取提升的权限。以下版本受到影响:Cisco F
CVSS信息
N/A
漏洞类别
授权问题