CVE-2018-0278: cisco secure_firewall_management_center

Vulnerability summary

CVE-2018-0278 is a medium (CVSS 6.5) vulnerability in cisco secure_firewall_management_center. EPSS estimates a 2.11% chance of exploitation in the next 30 days, higher than 81.4% of scored vulnerabilities.

Timeline

1. 02-05-2018
   PublishedVulnerability first disclosed.
2. 29-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the system. The vulnerability is due to improper cross-origin domain protections for the WebSocket protocol. An attacker could exploit this vulnerability by convincing a user to visit a malicious website designed to send requests to the affected application while the user is logged into the application with an active session cookie. A successful exploit could allow the attacker to retrieve policy or configuration information from the affected software and to perform another attack against the management console. Cisco Bug IDs: CSCvh68311.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.