The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2015-07-29T01:00:00

Updated: 2024-08-06T06:11:12.194Z

Reserved: 2015-06-04T00:00:00

Link: CVE-2015-4288

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-07-29T01:59:06.890

Modified: 2024-11-21T02:30:46.463

Link: CVE-2015-4288

cve-icon Redhat

No data.