Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:34
Type | Values Removed | Values Added |
---|---|---|
References | () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-fsm - Vendor Advisory | |
References | () http://www.securitytracker.com/id/1034488 - |
Information
Published : 2015-12-18 11:59
Updated : 2024-11-21 02:34
NVD link : CVE-2015-6427
Mitre link : CVE-2015-6427
CVE.ORG link : CVE-2015-6427
JSON object : View
Products Affected
cisco
- firesight_system_software
CWE
CWE-254
7PK - Security Features