Cisco Firepower Management Center 2021 cleartext storage in gui

Summaryinfo

A vulnerability identified as problematic has been detected in Cisco Firepower Management Center 2021. This issue affects some unknown processing of the component Administrative Web-based GUI Configuration Manager. The manipulation leads to cleartext storage in gui. This vulnerability is listed as CVE-2021-34750. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Firepower Management Center 2021 and classified as problematic. This issue affects some unknown functionality of the component Administrative Web-based GUI Configuration Manager. The manipulation with an unknown input leads to a cleartext storage in gui vulnerability. Using CWE to declare the problem leads to CWE-317. The product stores sensitive information in cleartext within the GUI. Impacted is confidentiality. The summary by CVE is:

A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require low privilege credentials on an affected device. This vulnerability is due to lack of proper encryption of sensitive information stored within the GUI configuration manager. An attacker could exploit this vulnerability by logging into the FMC GUI and navigating to certain sensitive configurations. A successful exploit could allow the attacker to view sensitive configuration parameters in clear text.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.[[Publication_URL{Layout()}]]This advisory is part of the October 2021 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see .

It is possible to read the advisory at sec.cloudapps.cisco.com. The identification of this vulnerability is CVE-2021-34750 since 06/15/2021. The exploitation is known to be easy. The attack may be initiated remotely. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1555 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• Firepower Management Center

Version

• 2021

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion