Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-20388

A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset.

Published

2024-10-23T18:15:07.697

Last Modified

2024-11-26T16:09:02.407

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-202
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco firepower_management_center 6.4.0.17 Yes
Application cisco firepower_management_center 6.4.0.18 Yes
Application cisco firepower_management_center 6.6.7.2 Yes
Application cisco firepower_management_center 7.0.6.1 Yes
Application cisco firepower_management_center 7.0.6.2 Yes
Application cisco firepower_management_center 7.2.5.1 Yes
Application cisco firepower_management_center 7.2.5.2 Yes
Application cisco firepower_management_center 7.2.6 Yes
Application cisco firepower_management_center 7.2.7 Yes
Application cisco firepower_management_center 7.2.8 Yes
Application cisco firepower_management_center 7.2.8.1 Yes
Application cisco firepower_management_center 7.4.0 Yes
Application cisco firepower_management_center 7.4.1 Yes
Application cisco firepower_management_center 7.4.1.1 Yes
Application cisco secure_firewall_management_center 6.2.3 Yes
Application cisco secure_firewall_management_center 6.2.3.1 Yes
Application cisco secure_firewall_management_center 6.2.3.2 Yes
Application cisco secure_firewall_management_center 6.2.3.3 Yes
Application cisco secure_firewall_management_center 6.2.3.4 Yes
Application cisco secure_firewall_management_center 6.2.3.5 Yes
Application cisco secure_firewall_management_center 6.2.3.6 Yes
Application cisco secure_firewall_management_center 6.2.3.7 Yes
Application cisco secure_firewall_management_center 6.2.3.8 Yes
Application cisco secure_firewall_management_center 6.2.3.9 Yes
Application cisco secure_firewall_management_center 6.2.3.10 Yes
Application cisco secure_firewall_management_center 6.2.3.11 Yes
Application cisco secure_firewall_management_center 6.2.3.12 Yes
Application cisco secure_firewall_management_center 6.2.3.13 Yes
Application cisco secure_firewall_management_center 6.2.3.14 Yes
Application cisco secure_firewall_management_center 6.2.3.15 Yes
Application cisco secure_firewall_management_center 6.2.3.16 Yes
Application cisco secure_firewall_management_center 6.2.3.17 Yes
Application cisco secure_firewall_management_center 6.2.3.18 Yes
Application cisco secure_firewall_management_center 6.4.0 Yes
Application cisco secure_firewall_management_center 6.4.0.1 Yes
Application cisco secure_firewall_management_center 6.4.0.2 Yes
Application cisco secure_firewall_management_center 6.4.0.3 Yes
Application cisco secure_firewall_management_center 6.4.0.4 Yes
Application cisco secure_firewall_management_center 6.4.0.5 Yes
Application cisco secure_firewall_management_center 6.4.0.6 Yes
Application cisco secure_firewall_management_center 6.4.0.7 Yes
Application cisco secure_firewall_management_center 6.4.0.8 Yes
Application cisco secure_firewall_management_center 6.4.0.9 Yes
Application cisco secure_firewall_management_center 6.4.0.10 Yes
Application cisco secure_firewall_management_center 6.4.0.11 Yes
Application cisco secure_firewall_management_center 6.4.0.12 Yes
Application cisco secure_firewall_management_center 6.4.0.13 Yes
Application cisco secure_firewall_management_center 6.4.0.14 Yes
Application cisco secure_firewall_management_center 6.4.0.15 Yes
Application cisco secure_firewall_management_center 6.4.0.16 Yes
Application cisco secure_firewall_management_center 6.6.0 Yes
Application cisco secure_firewall_management_center 6.6.0.1 Yes
Application cisco secure_firewall_management_center 6.6.1 Yes
Application cisco secure_firewall_management_center 6.6.3 Yes
Application cisco secure_firewall_management_center 6.6.4 Yes
Application cisco secure_firewall_management_center 6.6.5 Yes
Application cisco secure_firewall_management_center 6.6.5.1 Yes
Application cisco secure_firewall_management_center 6.6.5.2 Yes
Application cisco secure_firewall_management_center 6.6.7 Yes
Application cisco secure_firewall_management_center 6.6.7.1 Yes
Application cisco secure_firewall_management_center 6.7.0 Yes
Application cisco secure_firewall_management_center 6.7.0.1 Yes
Application cisco secure_firewall_management_center 6.7.0.2 Yes
Application cisco secure_firewall_management_center 6.7.0.3 Yes
Application cisco secure_firewall_management_center 7.0.0 Yes
Application cisco secure_firewall_management_center 7.0.0.1 Yes
Application cisco secure_firewall_management_center 7.0.1 Yes
Application cisco secure_firewall_management_center 7.0.1.1 Yes
Application cisco secure_firewall_management_center 7.0.2 Yes
Application cisco secure_firewall_management_center 7.0.2.1 Yes
Application cisco secure_firewall_management_center 7.0.3 Yes
Application cisco secure_firewall_management_center 7.0.4 Yes
Application cisco secure_firewall_management_center 7.0.5 Yes
Application cisco secure_firewall_management_center 7.0.6 Yes
Application cisco secure_firewall_management_center 7.1.0 Yes
Application cisco secure_firewall_management_center 7.1.0.1 Yes
Application cisco secure_firewall_management_center 7.1.0.2 Yes
Application cisco secure_firewall_management_center 7.1.0.3 Yes
Application cisco secure_firewall_management_center 7.2.0 Yes
Application cisco secure_firewall_management_center 7.2.0.1 Yes
Application cisco secure_firewall_management_center 7.2.1 Yes
Application cisco secure_firewall_management_center 7.2.2 Yes
Application cisco secure_firewall_management_center 7.2.3 Yes
Application cisco secure_firewall_management_center 7.2.3.1 Yes
Application cisco secure_firewall_management_center 7.2.4 Yes
Application cisco secure_firewall_management_center 7.2.4.1 Yes
Application cisco secure_firewall_management_center 7.2.5 Yes
Application cisco secure_firewall_management_center 7.3.0 Yes
Application cisco secure_firewall_management_center 7.3.1 Yes
Application cisco secure_firewall_management_center 7.3.1.1 Yes
Application cisco secure_firewall_management_center 7.3.1.2 Yes
Application cisco firepower_threat_defense 6.4.0.4 Yes
Application cisco firepower_threat_defense 6.4.0.10 Yes
Application cisco firepower_threat_defense 6.4.0.12 Yes
Application cisco firepower_threat_defense 6.4.0.14 Yes
Application cisco firepower_threat_defense 6.4.0.16 Yes
Application cisco firepower_threat_defense 6.4.0.18 Yes
Application cisco firepower_threat_defense 6.6.5.1 Yes
Application cisco firepower_threat_defense 6.6.7 Yes
Application cisco firepower_threat_defense 6.7.0.2 Yes
Application cisco firepower_threat_defense 7.1.0.1 Yes
Application cisco firepower_threat_defense 7.1.0.3 Yes
Application cisco firepower_threat_defense 7.2.2 Yes
Application cisco firepower_threat_defense 7.4.1 Yes
References