CVE-2015-6427: Medium severity cisco firesight system vulnerability
Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6427?
The severity of CVE-2015-6427 is classified as high due to the potential for remote exploitation.
How do I fix CVE-2015-6427?
To fix CVE-2015-6427, upgrade your Cisco FireSIGHT Management Center to a version that is not affected, such as version 6.0.1 or later.
What are the affected versions for CVE-2015-6427?
CVE-2015-6427 affects Cisco FireSIGHT System Software versions 5.3.0 through 6.0.0.
What impact does CVE-2015-6427 have on security?
CVE-2015-6427 allows attackers to bypass HTTP attack detection, potentially leading to undetected malicious activities.
Is there a workaround for CVE-2015-6427?
There are no recognized workarounds for CVE-2015-6427; updating to a secure version is recommended.