CVE-2021-1126: cisco cisco firepower management center Plaintext Storage of a Password

Vulnerability summary

CVE-2021-1126 is a medium (CVSS 5.5) Plaintext Storage of a Password vulnerability in cisco cisco firepower management center. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.8% of scored vulnerabilities.

Timeline

1. 13-01-2021
   PublishedVulnerability first disclosed.
2. 12-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server.

• CWE-256Plaintext Storage of a PasswordThe product stores a password in plaintext within resources such as memory or files.
• CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.