Vulnerability · Published Jan 13, 2021 · Assigned by cisco

CVE-2021-1126Cisco Firepower Management Center Information Disclosure Vulnerability

Medium 5.5

In plain English

A medium-severity security flaw in Cisco Firepower Management Center from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.0)5.5Medium

Exploit odds (30 days)0.3%top 81.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco Firepower Management Center	n/a

Weakness: CWE-256 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

20210113 Cisco Firepower Management Center Information Disclosure Vulnerability vendor-advisory, x_refsource_CISCO