CVE-2016-1458

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions 4.x through 5.3.0.2, 5.3.1.x through 5.3.1.1, and 5.4.x through 5.4.0.0 Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.0.2, 5.3.1.x through 5.3.1.1, and 5.4.x through 5.4.0.0

Description The issue allows remote authenticated users to increase user-account privileges via crafted HTTP requests.

Recommendations For Cisco Firepower Management Center versions 4.x through 5.3.0.2, update to version 5.3.0.3 or later. For Cisco Firepower Management Center versions 5.3.1.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Firepower Management Center versions 5.4.x through 5.4.0.0, update to version 5.4.0.1 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.0.2, update to version 5.3.0.3 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 5.3.1.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 5.4.x through 5.4.0.0, update to version 5.4.0.1 or later.