PT-2015-3366 · Fortinet · Fortios
Publicado
2015-08-11
·
Atualizado
2016-12-03
·
CVE-2015-2323
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
FortiOS versions 5.0.x through 5.0.11
FortiOS versions 5.2.x through 5.2.3
Description
The issue is caused by the use of weak ciphers when establishing TLS connections. This can allow a remote attacker to conduct man-in-the-middle attacks and spoof TLS content by modifying packets.
Recommendations
For FortiOS versions 5.0.x through 5.0.11, update to version 5.0.12 or later to resolve the issue.
For FortiOS versions 5.2.x through 5.2.3, update to version 5.2.4 or later to resolve the issue.
As a temporary workaround, consider disabling the use of anonymous, export, and RC4 ciphers in TLS connections to FortiGuard servers until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Fortios