CVE-2021-1126
Assigner: cisco
Published: 2021-01-13T00:00:00
State: PUBLISHED
affected: product: Cisco Firepower Management Center 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-01-13T00:00:00
descriptions: value: A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. 
metrics: cvssV3_0: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-256
description: CWE-256
type: CWE
source: advisory: cisco-sa-fmc-infodisc-RJdktM6f
defect: CSCvh67867
CSCvp40452
discovery: INTERNAL
title: Cisco Firepower Management Center Information Disclosure Vulnerability