5

CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Firesight System Software Version 5.3.0
Cisco ≫ Firesight System Software Version 5.3.0.1
Cisco ≫ Firesight System Software Version 5.3.0.2
Cisco ≫ Firesight System Software Version 5.3.1
Cisco ≫ Firesight System Software Version 5.3.1.1
Cisco ≫ Firesight System Software Version 5.3.1.2
Cisco ≫ Firesight System Software Version 5.3.1.3
Cisco ≫ Firesight System Software Version 5.3.1.4
Cisco ≫ Firesight System Software Version 5.3.1.5
Cisco ≫ Firesight System Software Version 5.3.1.7
Cisco ≫ Firesight System Software Version 5.4.0
Cisco ≫ Firesight System Software Version 5.4.0.1
Cisco ≫ Firesight System Software Version 5.4.0.4
Cisco ≫ Firesight System Software Version 5.4.1
Cisco ≫ Firesight System Software Version 5.4.1.2
Cisco ≫ Firesight System Software Version 5.4.1.3
Cisco ≫ Firesight System Software Version 5.4.1.4
Cisco ≫ Firesight System Software Version 6.0.0
Cisco ≫ Firesight System Software Version 6.0.0.1
Cisco ≫ Firesight System Software Version 6.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.73% 0.747
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-fsm
Vendor Advisory
http://www.securitytracker.com/id/1034488