CVE-2019-12627CWE-284broken-access-control

CVE-2019-12627

High · published August 21, 2019

CVSS v3.1
7.5
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01163 · 67.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-08-21T23:15Z
Affected products (1)
ProductVersionsFixed in
cisco/secure_firewall_threat_defense< 6.4.0.46.4.0.4
References (2)
EPSS history
Timeline
  • 21 AUG 18:05Z
    Cisco Firepower Threat Defense Software Information Disclosure Vulnerability
    cvelistv5