CVE-2016-6394

Critical

Published: 12/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier.

Risk Assessment

Attackers can take control of user sessions, potentially leading to unauthorized access to sensitive data.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.