Unscored CVE-2016-6394 EUVD-2016-7317GHSA-gqcc-hr56-mwvj

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attacke…

Published Sep 12, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

References

92825 vdb-entry
20160907 Cisco Firepower Management Center and FireSIGHT System Software Session Fixation Vulnerability vendor-advisory
1036757 vdb-entry