CVE-2019-12627

A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-frpwr-td-info	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:amp_7150:-:::::::*
	cpe:2.3:h:cisco:amp_8150:-:::::::*
	cpe:2.3:h:cisco:firepower_7010:-:::::::*
	cpe:2.3:h:cisco:firepower_7020:-:::::::*
	cpe:2.3:h:cisco:firepower_7030:-:::::::*
	cpe:2.3:h:cisco:firepower_7050:-:::::::*
	cpe:2.3:h:cisco:firepower_7110:-:::::::*
	cpe:2.3:h:cisco:firepower_7115:-:::::::*
	cpe:2.3:h:cisco:firepower_7120:-:::::::*
	cpe:2.3:h:cisco:firepower_7125:-:::::::*
	cpe:2.3:h:cisco:firepower_8120:-:::::::*
	cpe:2.3:h:cisco:firepower_8130:-:::::::*
	cpe:2.3:h:cisco:firepower_8140:-:::::::*
	cpe:2.3:h:cisco:firepower_8250:-:::::::*
	cpe:2.3:h:cisco:firepower_8260:-:::::::*
	cpe:2.3:h:cisco:firepower_8270:-:::::::*
	cpe:2.3:h:cisco:firepower_8290:-:::::::*
	cpe:2.3:h:cisco:firepower_8350:-:::::::*
	cpe:2.3:h:cisco:firepower_8360:-:::::::*
	cpe:2.3:h:cisco:firepower_8370:-:::::::*
	cpe:2.3:h:cisco:firepower_8390:-:::::::*
	cpe:2.3:h:cisco:firepower_management_center_1000:-:::::::*
	cpe:2.3:h:cisco:firepower_management_center_2000:-:::::::*
	cpe:2.3:h:cisco:firepower_management_center_2500:-:::::::*
	cpe:2.3:h:cisco:firepower_management_center_4000:-:::::::*
	cpe:2.3:h:cisco:firesight_management_center_1500:-:::::::*
	cpe:2.3:h:cisco:firesight_management_center_3500:-:::::::*
	cpe:2.3:h:cisco:firesight_management_center_750:-:::::::*

History

No history.

Information

Published : 2019-08-21 19:15

Updated : 2020-10-08 14:41

NVD link : CVE-2019-12627

Mitre link : CVE-2019-12627

CVE.ORG link : CVE-2019-12627

JSON object : View

Products Affected

cisco

firepower_8130
firepower_threat_defense
firepower_management_center_2500
firesight_management_center_1500
firepower_management_center_2000
firepower_7125
firepower_8350
firepower_7010
firepower_8360
firepower_7020
firepower_7115
firepower_management_center_4000
firepower_8250
amp_7150
firepower_management_center_1000
firepower_8260
firepower_8140
firepower_8290
firesight_management_center_750
amp_8150
firepower_7110
firepower_7120
firepower_8390
firepower_8370
firepower_7050
firepower_8120
firepower_7030
firepower_8270
firesight_management_center_3500

CWE

NVD-CWE-Other CWE-284

Improper Access Control

{"id": "CVE-2019-12627", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-08-21T19:15:13.293", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-frpwr-td-info", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data."}, {"lang": "es", "value": "Una vulnerabilidad en la configuraci\u00f3n de la pol\u00edtica de aplicaci\u00f3n del software Cisco Firepower Threat Defense (FTD) podr\u00eda permitir que un atacante remoto no autenticado obtenga acceso de lectura no autorizado a datos confidenciales. La vulnerabilidad se debe a la identificaci\u00f3n insuficiente de la aplicaci\u00f3n. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando tr\u00e1fico dise\u00f1ado a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante obtener acceso de lectura no autorizado a datos confidenciales."}], "lastModified": "2020-10-08T14:41:09.530", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E08C16B-B65A-4CF7-9360-C3DAD7CFE225", "versionEndExcluding": "6.4.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:amp_7150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F299F4A-CA8C-46EA-A86F-CA52C182DAE6"}, {"criteria": "cpe:2.3:h:cisco:amp_8150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8B6B5352-91B4-4568-A43D-48A534904AAE"}, {"criteria": "cpe:2.3:h:cisco:firepower_7010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0BDD6E70-C62E-4A23-85DE-19DD6FDA096B"}, {"criteria": "cpe:2.3:h:cisco:firepower_7020:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FB52500-E35C-4759-818F-07ADC19C7A81"}, {"criteria": "cpe:2.3:h:cisco:firepower_7030:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3679DACC-E921-4450-B90C-0F1BE692837D"}, {"criteria": "cpe:2.3:h:cisco:firepower_7050:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD1CBD8A-26C1-4C12-9A59-F66FCBF92F61"}, {"criteria": "cpe:2.3:h:cisco:firepower_7110:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "714F9D04-E72D-4EDD-8EA3-7B072AA8DB5E"}, {"criteria": "cpe:2.3:h:cisco:firepower_7115:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14B7938D-3192-4711-B1AC-5DFBBC05C427"}, {"criteria": "cpe:2.3:h:cisco:firepower_7120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D780F90-F8A6-4380-912D-51EFBBF773E8"}, {"criteria": "cpe:2.3:h:cisco:firepower_7125:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6815185D-D852-4C82-8352-4C0B8C84044E"}, {"criteria": "cpe:2.3:h:cisco:firepower_8120:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1222D6E3-729D-44E3-962E-BA6C953A0821"}, {"criteria": "cpe:2.3:h:cisco:firepower_8130:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "12F8691E-CA7E-4FDC-B8F2-8AF226CB0E80"}, {"criteria": "cpe:2.3:h:cisco:firepower_8140:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FBC482DF-6EB7-4FD5-8825-7A970F6B806C"}, {"criteria": "cpe:2.3:h:cisco:firepower_8250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE3FA88E-55A2-4855-93F7-D1E13BBAD0C3"}, {"criteria": "cpe:2.3:h:cisco:firepower_8260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5810A597-A4FD-4F21-87CB-D4F2E12A9B49"}, {"criteria": "cpe:2.3:h:cisco:firepower_8270:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6DD2DA1C-AF33-4594-B12F-2ED95D71B950"}, {"criteria": "cpe:2.3:h:cisco:firepower_8290:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "469DAE3D-2636-4760-B5A0-AE9D24D4894A"}, {"criteria": "cpe:2.3:h:cisco:firepower_8350:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8E582E77-8F0E-495F-ADA6-B8EA9E8B46B5"}, {"criteria": "cpe:2.3:h:cisco:firepower_8360:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D8A78557-4176-403C-817C-1B46759F6E14"}, {"criteria": "cpe:2.3:h:cisco:firepower_8370:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "068F490D-CCD1-446E-A380-958988D43AD7"}, {"criteria": "cpe:2.3:h:cisco:firepower_8390:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A5C5FBFF-804B-45FD-A145-CEB8382E6FA9"}, {"criteria": "cpe:2.3:h:cisco:firepower_management_center_1000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "44C4E004-BCBA-4C2A-BBC7-8C6F9E54CC15"}, {"criteria": "cpe:2.3:h:cisco:firepower_management_center_2000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A389E5A4-0994-4F75-A264-18371D726ACA"}, {"criteria": "cpe:2.3:h:cisco:firepower_management_center_2500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E36B8162-AF24-4538-B81E-6FB95AC221C8"}, {"criteria": "cpe:2.3:h:cisco:firepower_management_center_4000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A9FD1A9-1BB3-4FFB-AB75-5BF8AF61FF1D"}, {"criteria": "cpe:2.3:h:cisco:firesight_management_center_1500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "756594F4-D397-425F-ACA3-2E130729B736"}, {"criteria": "cpe:2.3:h:cisco:firesight_management_center_3500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B96B6255-BEE7-4AF7-BC82-74CDCBE2BEA1"}, {"criteria": "cpe:2.3:h:cisco:firesight_management_center_750:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6DE96D31-BB8C-46F0-98F2-903F794C19D9"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

JSON object

Attach tags to CVE-2019-12627

7.5^/10

5.0^/10

Attach tags to `CVE-2019-12627`