NVD

Id
27294  
Name
CVE-2015-6357  
Description
The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-18  
Modified Date
2016-12-07  
Seq
2015-6357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143805 27294 CVE-2015-6357 http://packetstormsecurity.com/files/134390/Cisco-FireSIGHT-Management-Center-Certificate-Validation.html  View
143806 27294 CVE-2015-6357 20151117 CVE-2015-6357: Cisco FireSIGHT Management Center SSL Validation Vulnerability  View
143807 27294 CVE-2015-6357 20151116 Cisco FireSIGHT Management Center Certificate Validation Vulnerability  View
143808 27294 CVE-2015-6357 http://wadofstuff.blogspot.com.au/2015/11/cve-2015-6357-firepwner-exploit-for.html  View
143809 27294 CVE-2015-6357 20151116 CVE-2015-6357: Cisco FireSIGHT Management Center SSL Validation Vulnerability  View
143810 27294 CVE-2015-6357 1034161  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10634 JVNDB-2015-005954 Cisco FireSIGHT Management Center のルール更新機能における SSL サーバになりすまされる脆弱性 Cisco FireSIGHT Management Center (MC) のルール更新機能は、support.sourcefire.com SSL サーバの X.509 証明書を検証しないため、このサーバになりすまされ、不正なパッケージを提供され、その結果、任意のコードを実行される脆弱性が存在します。 CVE-2015-6357 83582 CVE-2015-6357 27294 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005954.html 2015-11-16 2015-11-19 View