Cisco Firepower Management Center Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a specific malicious web page.

N/A

指向未可信站点的URL重定向(开放重定向)

Cisco Firepower Management Center 输入验证错误漏洞

Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco FMC 6.3.0之前版本中的Web接口存在输入验证错误漏洞，该漏洞源于未正确验证HTTP请求参数。攻击者可通过拦截和修改来自用户的HTTP请求利用该漏洞将用户重定向到特定的恶意网页。

N/A

N/A