CVE

Id
79600  
CVE No.
CVE-2015-2323  
Status
Candidate  
Description
FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets.  
Phase
Assigned (20150318)  
Votes
None (candidate not yet proposed)  
Comments