CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2015-12-18

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Firesight System Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-fsm
• http://www.securitytracker.com/id/1034488