CVE Daily

CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP att...

Medium CVSS 5.0

Overview

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.

CWE: CWE-254 Published: 2015-12-18T11:59:02.793
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags