CVE-2013-5506

The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.

Score

CVSS 2.0 6.6 Medium

Status

Modified - psirt@cisco.com

Published

2013-10-13

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Firewall Services Module Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-fwsm