RSS   Podatności dla 'Fortios ips engine'   RSS

2019-08-23
 
CVE-2019-5592

CWE-200
 

 
Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position.

 

 >>> Vendor: Fortiguard 2 Produkty
Forticlient
Fortios ips engine


Copyright 2024, cxsecurity.com

 

Back to Top