Details of VAR-201507-0516

ID

VAR-201507-0516

CVE

CVE-2015-4288

TITLE

plural Cisco Security Appliance LDAP Vulnerability in server implementation

Trust: 0.8

sources: JVNDB: JVNDB-2015-003946

DESCRIPTION

The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470. Vendors have confirmed this vulnerability Bug ID CSCuo29561 , CSCuv40466 ,and CSCuv40470 It is released as.Man-in-the-middle attacks (man-in-the-middle attack) May masquerade as a server through a crafted certificate and retrieve important information. The Cisco WSA is a set of web security appliances. ESA is a set of email security devices. Content SMA is a set of content security management devices. A number of Cisco product LDAP servers have security vulnerabilities. The program failed to validate the X.509 certificate on the SSL server side. Multiple Cisco Products are prone to a security-bypass vulnerability. An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks. This issue is being tracked by Cisco Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470

Trust: 2.52

sources: NVD: CVE-2015-4288 // JVNDB: JVNDB-2015-003946 // CNVD: CNVD-2015-05072 // BID: 76070 // VULHUB: VHN-82249

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2015-05072

AFFECTED PRODUCTS

vendor:	cisco	model:	email security appliance	scope:	eq	version:	8.5.7-042	Trust: 2.5
vendor:	cisco	model:	content security management appliance	scope:	eq	version:	8.3.6-048	Trust: 2.5
vendor:	cisco	model:	web security appliance	scope:	eq	version:	8.5.0-000	Trust: 2.2
vendor:	cisco	model:	asyncos	scope:	eq	version:	8.3.6-048 (cisco content security management appliance )	Trust: 0.8
vendor:	cisco	model:	asyncos	scope:	eq	version:	8.5.0.000 (cisco web security the appliance )	Trust: 0.8
vendor:	cisco	model:	asyncos	scope:	eq	version:	8.5.7-042 (cisco e email security the appliance )	Trust: 0.8
vendor:	cisco	model:	e email security the appliance	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	web security the appliance	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	content security management appliance	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	web security appliance	scope:	eq	version:	8.5.0.000	Trust: 0.3

sources: CNVD: CNVD-2015-05072 // BID: 76070 // JVNDB: JVNDB-2015-003946 // CNNVD: CNNVD-201507-801 // NVD: CVE-2015-4288

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2015-4288
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2015-4288
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2015-05072
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201507-801
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-82249
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2015-4288
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2015-05072
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-82249
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2015-05072 // VULHUB: VHN-82249 // JVNDB: JVNDB-2015-003946 // CNNVD: CNNVD-201507-801 // NVD: CVE-2015-4288

PROBLEMTYPE DATA

problemtype:

CWE-310

Trust: 1.9

sources: VULHUB: VHN-82249 // JVNDB: JVNDB-2015-003946 // NVD: CVE-2015-4288

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201507-801

TYPE

encryption problem

Trust: 0.6

sources: CNNVD: CNNVD-201507-801

CONFIGURATIONS

sources: JVNDB: JVNDB-2015-003946

PATCH

title:	40137	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=40137	Trust: 0.8
title:	Patch for Multiple Cisco Product LDAP Server SSL Certificate Validation Vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/61822	Trust: 0.6

sources: CNVD: CNVD-2015-05072 // JVNDB: JVNDB-2015-003946

EXTERNAL IDS

db:	NVD	id:	CVE-2015-4288	Trust: 3.4
db:	BID	id:	76070	Trust: 1.0
db:	JVNDB	id:	JVNDB-2015-003946	Trust: 0.8
db:	CNNVD	id:	CNNVD-201507-801	Trust: 0.7
db:	CNVD	id:	CNVD-2015-05072	Trust: 0.6
db:	VULHUB	id:	VHN-82249	Trust: 0.1

sources: CNVD: CNVD-2015-05072 // VULHUB: VHN-82249 // BID: 76070 // JVNDB: JVNDB-2015-003946 // CNNVD: CNNVD-201507-801 // NVD: CVE-2015-4288

REFERENCES

url:	http://tools.cisco.com/security/center/viewalert.x?alertid=40137	Trust: 2.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-4288	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-4288	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: CNVD: CNVD-2015-05072 // VULHUB: VHN-82249 // BID: 76070 // JVNDB: JVNDB-2015-003946 // CNNVD: CNNVD-201507-801 // NVD: CVE-2015-4288

CREDITS

Cisco

Trust: 0.3

sources: BID: 76070

SOURCES

db:	CNVD	id:	CNVD-2015-05072
db:	VULHUB	id:	VHN-82249
db:	BID	id:	76070
db:	JVNDB	id:	JVNDB-2015-003946
db:	CNNVD	id:	CNNVD-201507-801
db:	NVD	id:	CVE-2015-4288

LAST UPDATE DATE

2024-11-23T22:56:24.804000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2015-05072	date:	2015-08-03T00:00:00
db:	VULHUB	id:	VHN-82249	date:	2015-07-29T00:00:00
db:	BID	id:	76070	date:	2015-07-24T00:00:00
db:	JVNDB	id:	JVNDB-2015-003946	date:	2015-07-30T00:00:00
db:	CNNVD	id:	CNNVD-201507-801	date:	2015-07-30T00:00:00
db:	NVD	id:	CVE-2015-4288	date:	2024-11-21T02:30:46.463

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2015-05072	date:	2015-08-03T00:00:00
db:	VULHUB	id:	VHN-82249	date:	2015-07-29T00:00:00
db:	BID	id:	76070	date:	2015-07-24T00:00:00
db:	JVNDB	id:	JVNDB-2015-003946	date:	2015-07-30T00:00:00
db:	CNNVD	id:	CNNVD-201507-801	date:	2015-07-30T00:00:00
db:	NVD	id:	CVE-2015-4288	date:	2015-07-29T01:59:06.890