CVE-2016-1356

CVE-2016-1356 describes a timing-based username enumeration vulnerability in Cisco FireSIGHT System Software version 6.1.0. The software's credential verification process does not use a constant-time algorithm, allowing remote attackers to discern valid usernames by analyzing timing differences during authentication attempts. This vulnerability has a CVSSv3 score of 3.7 (LOW), indicating a network-based attack with high attack complexity and low impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.