CVE-2013-5506

Published Oct 13, 2013

Last updated a month ago

Overview

Description
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.
Source
psirt@cisco.com
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
6.6
Impact score
10
Exploitability score
2.7
Vector string
AV:L/AC:M/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-264

Social media

Hype score
Not currently trending

Configurations