Description (CNA)
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Cisco AMP for Endpoints | affected Cisco AMP for Endpoints |
CWE
CWE-798
References
- http://www.securityfocus.com/bid/101520
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171020-ampfe
ADP enrichment
No English description supplied.