Cisco Firepower Management Center cleartext storage in gui

Summaryinfo

A vulnerability was found in Cisco Firepower Management Center. It has been rated as problematic. This affects an unknown part of the component Administrative Web-based GUI Configuration Manager. Performing a manipulation results in cleartext storage in gui. This vulnerability is identified as CVE-2021-34751. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Cisco Firepower Management Center (version unknown). This affects an unknown function of the component Administrative Web-based GUI Configuration Manager. The manipulation with an unknown input leads to a cleartext storage in gui vulnerability. CWE is classifying the issue as CWE-317. The product stores sensitive information in cleartext within the GUI. This is going to have an impact on confidentiality. The summary by CVE is:

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This vulnerability exists because of improper encryption of sensitive information stored within the GUI configuration manager. An attacker could exploit this vulnerability by logging into the GUI of Cisco FMC Software and navigating to certain sensitive configurations. A successful exploit could allow the attacker to view sensitive configuration parameters in clear text.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.[[Publication_URL{Layout()}]]This advisory is part of the October 2021 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see . 

The advisory is shared at sec.cloudapps.cisco.com. This vulnerability is uniquely identified as CVE-2021-34751 since 06/15/2021. The exploitability is told to be easy. It is possible to initiate the attack remotely. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1555 for this issue.

Upgrading eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• Firepower Management Center

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion