Описание
Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.
EPSS
Процентиль: 43%
0.00206
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-20