CVE-2017-3822

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@cisco.com

Published

2017-02-03

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Secure Firewall Threat Defense (Cisco)

References

• http://www.securityfocus.com/bid/95944
• http://www.securitytracker.com/id/1037775
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2