Lucene search

K
fortinetFortiGuard LabsFG-IR-19-145
HistoryFeb 25, 2020 - 12:00 a.m.

FortiOS SSL Deep Inspection TLS Padding Oracle Vulnerabilities

2020-02-2500:00:00
FortiGuard Labs
www.fortiguard.com
15

EPSS

0.001

Percentile

47.9%

Multiple padding Oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS when configured with SSL Deep Inspection policies and with the IPS sensor enabled may allow an attacker to decipher TLS connections going through the FortiGate by monitoring the traffic (should he/she be able to).

EPSS

0.001

Percentile

47.9%

Related for FG-IR-19-145