CVE-2015-2323

FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard…

published August 11, 2015

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01454 · 73.2th percentile
Published
2015-08-11T14:00Z
EPSS history
Timeline
  • 11 AUG 14:00Z
    FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard…
    cvelistv5