cve/2016/CVE-2016-6435.md

CVE-2016-6435

Description

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.

POC

Reference

• https://www.exploit-db.com/exploits/40464/
• https://www.exploit-db.com/exploits/40464/
• https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt
• https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt

Github

• https://github.com/ARPSyndicate/cvemon