mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
323 lines
16 KiB
JSON
323 lines
16 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2022-20938",
|
|
"ASSIGNER": "psirt@cisco.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view sensitive information.\r\n\r This vulnerability is due to insufficient validation of the XML syntax when importing a module. An attacker could exploit this vulnerability by supplying a specially crafted XML file to the function. A successful exploit could allow the attacker to read sensitive data that would normally not be revealed."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Improper Restriction of XML External Entity Reference",
|
|
"cweId": "CWE-611"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Cisco",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Cisco Firepower Management Center",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.5"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.6"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.7"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.9"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.10"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.11"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.12"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.13"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.14"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.15"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.8"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.16"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.17"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.2.3.18"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.5"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.6"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.7"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.8"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.9"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.10"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.11"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.12"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.13"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.14"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.4.0.15"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.5"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.5.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.6.5.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.7.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.7.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.7.0.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.7.0.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.1.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.2.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.1.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.1.0.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.1.0.2"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd",
|
|
"refsource": "MISC",
|
|
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd"
|
|
}
|
|
]
|
|
},
|
|
"source": {
|
|
"advisory": "cisco-sa-fmc-xxe-MzPC4bYd",
|
|
"discovery": "INTERNAL",
|
|
"defects": [
|
|
"CSCwb53694"
|
|
]
|
|
},
|
|
"exploit": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
|
|
}
|
|
],
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
|
"baseScore": 4.3,
|
|
"baseSeverity": "MEDIUM",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE"
|
|
}
|
|
]
|
|
}
|
|
} |