Umbra Wiki cve cve/CVE-2017-3822
Back to wiki

CVE-2017-3822 — NVD record

provenance: imported · CVE: CVE-2017-3822

CVE-2017-3822

NVD vulnerability record
Published 2017-02-03
Last modified 2026-08-11
Status Modified
CVSS v3.0 5.3 MEDIUM
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE CWE-20

Description

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0.

References

  • http://www.securityfocus.com/bid/95944
  • http://www.securitytracker.com/id/1037775
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2
  • http://www.securityfocus.com/bid/95944
  • http://www.securitytracker.com/id/1037775
  • https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2

Sources

  • NVD detail: https://nvd.nist.gov/vuln/detail/CVE-2017-3822
  • NVD API 2.0: https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2017-3822

Related

concept/cve-anatomy weakness/CWE-20