Test Kennung:	1.3.6.1.4.1.25623.1.0.106303
Kategorie:	CISCO
Titel:	Cisco Firepower Management Center SQL Injection Vulnerability
Zusammenfassung:	A vulnerability in the web framework of the Cisco Firepower Management; Center could allow an authenticated, remote attacker to perform SQL injection on the affected device.
Beschreibung:	Summary: A vulnerability in the web framework of the Cisco Firepower Management Center could allow an authenticated, remote attacker to perform SQL injection on the affected device. Vulnerability Insight: The vulnerability is due to a lack of input validation. An attacker could exploit this vulnerability by sending a crafted SQL request to the affected web page. Vulnerability Impact: An exploit could allow the attacker to modify the SQL database used by the Firepower Management Center. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6419 BugTraq ID: 93206 http://www.securityfocus.com/bid/93206 Cisco Security Advisory: 20160928 Cisco Firepower Management Center SQL Injection Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.