McAfee ePolicy Orchestrator CVE-2015-2859 SSL Certificate Validation Security Bypass Vulnerability
BID:75020
Info
McAfee ePolicy Orchestrator CVE-2015-2859 SSL Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 75020 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2859 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2015 12:00AM |
| Updated: | Jun 04 2015 12:00AM |
| Credit: | anonymous |
| Vulnerable: |
McAfee ePolicy Orchestrator 5.1.1 McAfee ePolicy Orchestrator 5.1 McAfee ePolicy Orchestrator 5.0 McAfee ePolicy Orchestrator 4.6.8 McAfee ePolicy Orchestrator 4.6.4 McAfee ePolicy Orchestrator 3.7 McAfee ePolicy Orchestrator 3.6.1 McAfee ePolicy Orchestrator 3.6 McAfee ePolicy Orchestrator 3.5.5 McAfee ePolicy Orchestrator 3.0 McAfee ePolicy Orchestrator 2.5.1 McAfee ePolicy Orchestrator 2.5 McAfee ePolicy Orchestrator 2.0 McAfee ePolicy Orchestrator 1.1 McAfee ePolicy Orchestrator 1.0 McAfee ePolicy Orchestrator 4.6.6 McAfee ePolicy Orchestrator 4.6.5 McAfee ePolicy Orchestrator 4.6.3 McAfee ePolicy Orchestrator 4.6.2 McAfee ePolicy Orchestrator 4.6.1 McAfee ePolicy Orchestrator 4.6.0 McAfee ePolicy Orchestrator 4.5.7 McAfee ePolicy Orchestrator 4.5.5 McAfee ePolicy Orchestrator 4.5.4 McAfee ePolicy Orchestrator 4.5.3 McAfee ePolicy Orchestrator 4.5.0 McAfee ePolicy Orchestrator 4.0 McAfee ePolicy Orchestrator 3.5 |
| Not Vulnerable: |
McAfee ePolicy Orchestrator 5.1.2 McAfee ePolicy Orchestrator 4.6.9 |
Discussion
McAfee ePolicy Orchestrator CVE-2015-2859 SSL Certificate Validation Security Bypass Vulnerability
McAfee ePolicy Orchestrator is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks and bypass certain security restrictions.
McAfee ePolicy Orchestrator is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks and bypass certain security restrictions.
Exploit / POC
McAfee ePolicy Orchestrator CVE-2015-2859 SSL Certificate Validation Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].