CVE-2015-6335

Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, 6.0.0 - Authenticated Command Execution as Root

Title source: llm

Description

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033873

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151016-fmc

Scores

EPSS 0.0274

EPSS Percentile 84.6%

Details

CWE

CWE-264

Status published

Products (3)

cisco/firesight_system_software 5.3.1.7

cisco/firesight_system_software 5.4.0.4

cisco/firesight_system_software 6.0.0

Published Oct 25, 2015

Tracked Since Feb 18, 2026