VulnerabilityModified
CVE-2015-5965
The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.
MEDIUM 5.0EPSS 2.09%
Does this matter?
Lower severity and a low EPSS score (2.09%). Track it; it rarely justifies an emergency change on its own.
Description
The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.09% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- fortinet/fortios
- Source
- cve@mitre.org
References
- http://www.fortiguard.com/advisory/FG-IR-15-016/Vendor Advisory
- http://www.securityfocus.com/bid/76065
- http://www.securitytracker.com/id/1033256
- https://security.gentoo.org/glsa/201508-01
- https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
- http://www.fortiguard.com/advisory/FG-IR-15-016/Vendor Advisory
- http://www.securityfocus.com/bid/76065
- http://www.securitytracker.com/id/1033256
- https://security.gentoo.org/glsa/201508-01
- https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.