Vulnerabilities > CVE-2019-1657 - Unspecified vulnerability in Cisco AMP Threat Grid Appliance and AMP Threat Grid Cloud

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2019-01-24

Updated: 2020-10-05

Summary

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected device. An exploit could allow the attacker to gain unauthorized access to information by using the API key credentials.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco AMP Threat Grid Appliance 1.0 Cisco AMP Threat Grid Appliance 1.1 Cisco AMP Threat Grid Appliance 1.2 Cisco AMP Threat Grid Appliance 1.2.1 Cisco AMP Threat Grid Appliance 1.3 Cisco AMP Threat Grid Appliance 1.4 Cisco AMP Threat Grid Appliance 1.4.1 Cisco AMP Threat Grid Appliance 1.4.2 Cisco AMP Threat Grid Appliance 1.4.3 Cisco AMP Threat Grid Appliance 1.4.4 Cisco AMP Threat Grid Appliance 1.4.5 Cisco AMP Threat Grid Appliance 1.4.6 Cisco AMP Threat Grid Appliance 2.0 Cisco AMP Threat Grid Appliance 2.0.1 Cisco AMP Threat Grid Appliance 2.0.2 Cisco AMP Threat Grid Appliance 2.0.3 Cisco AMP Threat Grid Appliance 2.0.4 Cisco AMP Threat Grid Appliance 2.1 Cisco AMP Threat Grid Appliance 2.1.1 Cisco AMP Threat Grid Appliance 2.1.2 Cisco AMP Threat Grid Appliance 2.1.3 Cisco AMP Threat Grid Appliance 2.1.4 Cisco AMP Threat Grid Appliance 2.1.5 Cisco AMP Threat Grid Appliance 2.1.6 Cisco AMP Threat Grid Appliance 2.2 Cisco AMP Threat Grid Appliance 2.2.1 Cisco AMP Threat Grid Appliance 2.2.2 Cisco AMP Threat Grid Appliance 2.2.3 Cisco AMP Threat Grid Appliance 2.2.4 Cisco AMP Threat Grid Appliance 2.3 Cisco AMP Threat Grid Appliance 2.3.1 Cisco AMP Threat Grid Appliance 2.3.2 Cisco AMP Threat Grid Appliance 2.3.3 Cisco AMP Threat Grid Appliance 2.4 Cisco AMP Threat Grid Appliance 2.4.0.1 Cisco AMP Threat Grid Appliance 2.4.1 Cisco AMP Threat Grid Appliance 2.4.2 Cisco AMP Threat Grid Appliance 2.4.3 Cisco AMP Threat Grid Appliance 2.4.3.1 Cisco AMP Threat Grid Appliance 2.4.3.2 Cisco AMP Threat Grid Appliance 2.4.3.3 Cisco AMP Threat Grid Cloud *	42

Summary

Vulnerable Configurations

References