CVE-2019-1657
Medium
Description
A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected device. An exploit could allow the attacker to gain unauthorized access to information by using the API key credentials.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Cisco Amp Threat Grid Appliance
PublishedJan 24, 2019
First seenJan 24, 2019
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- cisco amp_threat_grid_appliance2.5 or later
- cisco amp_threat_grid_cloud3.5.68 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco amp_threat_grid_appliance | v < 2.5 | 2.5 |
| cisco amp_threat_grid_cloud | v < 3.5.68 | 3.5.68 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.