Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firesight_system_software | Cisco | 5.2.0 (including) | 5.2.0 (including) |
| Firesight_system_software | Cisco | 5.2.0.1 (including) | 5.2.0.1 (including) |
| Firesight_system_software | Cisco | 5.2.0.2 (including) | 5.2.0.2 (including) |
| Firesight_system_software | Cisco | 5.2.0.3 (including) | 5.2.0.3 (including) |
| Firesight_system_software | Cisco | 5.2.0.4 (including) | 5.2.0.4 (including) |
| Firesight_system_software | Cisco | 5.2.0.5 (including) | 5.2.0.5 (including) |
| Firesight_system_software | Cisco | 5.2.0.6 (including) | 5.2.0.6 (including) |
| Firesight_system_software | Cisco | 5.2.0.8 (including) | 5.2.0.8 (including) |
| Firesight_system_software | Cisco | 5.3.0 (including) | 5.3.0 (including) |
| Firesight_system_software | Cisco | 5.3.0.1 (including) | 5.3.0.1 (including) |
| Firesight_system_software | Cisco | 5.3.0.2 (including) | 5.3.0.2 (including) |
| Firesight_system_software | Cisco | 5.3.0.3 (including) | 5.3.0.3 (including) |
| Firesight_system_software | Cisco | 5.3.0.4 (including) | 5.3.0.4 (including) |
| Firesight_system_software | Cisco | 5.3.0.5 (including) | 5.3.0.5 (including) |
| Firesight_system_software | Cisco | 5.3.0.6 (including) | 5.3.0.6 (including) |
| Firesight_system_software | Cisco | 5.3.0.7 (including) | 5.3.0.7 (including) |
| Firesight_system_software | Cisco | 5.3.1 (including) | 5.3.1 (including) |
| Firesight_system_software | Cisco | 5.3.1.1 (including) | 5.3.1.1 (including) |
| Firesight_system_software | Cisco | 5.3.1.2 (including) | 5.3.1.2 (including) |
| Firesight_system_software | Cisco | 5.3.1.3 (including) | 5.3.1.3 (including) |
| Firesight_system_software | Cisco | 5.3.1.4 (including) | 5.3.1.4 (including) |
| Firesight_system_software | Cisco | 5.3.1.5 (including) | 5.3.1.5 (including) |
| Firesight_system_software | Cisco | 5.3.1.7 (including) | 5.3.1.7 (including) |
| Firesight_system_software | Cisco | 5.4.0 (including) | 5.4.0 (including) |
| Firesight_system_software | Cisco | 5.4.0.1 (including) | 5.4.0.1 (including) |
| Firesight_system_software | Cisco | 5.4.0.2 (including) | 5.4.0.2 (including) |
| Firesight_system_software | Cisco | 5.4.0.3 (including) | 5.4.0.3 (including) |
| Firesight_system_software | Cisco | 5.4.0.4 (including) | 5.4.0.4 (including) |
| Firesight_system_software | Cisco | 5.4.0.5 (including) | 5.4.0.5 (including) |
| Firesight_system_software | Cisco | 5.4.0.6 (including) | 5.4.0.6 (including) |
| Firesight_system_software | Cisco | 5.4.1 (including) | 5.4.1 (including) |
| Firesight_system_software | Cisco | 5.4.1.2 (including) | 5.4.1.2 (including) |
| Firesight_system_software | Cisco | 5.4.1.3 (including) | 5.4.1.3 (including) |
| Firesight_system_software | Cisco | 5.4.1.4 (including) | 5.4.1.4 (including) |
| Firesight_system_software | Cisco | 6.0.0 (including) | 6.0.0 (including) |
| Firesight_system_software | Cisco | 6.0.0.1 (including) | 6.0.0.1 (including) |
| Firesight_system_software | Cisco | 6.0.1 (including) | 6.0.1 (including) |
| Firesight_system_software | Cisco | 6.1.0 (including) | 6.1.0 (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc
- http://www.securityfocus.com/bid/92825
- http://www.securitytracker.com/id/1036757
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsmc
- http://www.securityfocus.com/bid/92825
- http://www.securitytracker.com/id/1036757