| Package | Affected versions | Patched versions |
|---|---|---|
| firewall services module software | = 3.1= 3.1(10)= 3.1(11)= 3.1(12)= 3.1(13)= 3.1(14)= 3.1(15)= 3.1(16)= 3.1(17)= 3.1(18)= 3.1(19)= 3.1(2)= 3.1(20)= 3.1(21)= 3.1(3)= 3.1(4)= 3.1(5)= 3.1(6)= 3.1(7)= 3.1(8)= 3.1(9)= 3.2= 3.2(1)= 3.2(10)= 3.2(11)= 3.2(12)= 3.2(13)= 3.2(14)= 3.2(15)= 3.2(16)= 3.2(17)= 3.2(18)= 3.2(19)= 3.2(2)= 3.2(20)= 3.2(21)= 3.2(22)= 3.2(3)= 3.2(4)= 3.2(5)= 3.2(6)= 3.2(7)= 3.2(8)= 3.2(9)= 4.0= 4.0(1)= 4.0(10)= 4.0(11)= 4.0(12)= 4.0(13)= 4.0(14)= 4.0(15)= 4.0(2)= 4.0(3)= 4.0(4)= 4.0(5)= 4.0(6)= 4.0(7)= 4.0(8)= 4.1= 4.1(1)= 4.1(10)= 4.1(11)= 4.1(12)= 4.1(2)= 4.1(3)= 4.1(4)= 4.1(5)= 4.1(6)= 4.1(7)= 4.1(8)= 4.1(9) |
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free