Lucene search

K

[email protected]NVD:CVE-2014-0351

HistorySep 10, 2014 - 6:55 p.m.

CVE-2014-0351

2014-09-1018:55:02

CWE-310

[email protected]

web.nvd.nist.gov

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.7%

The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonymous ciphersuites, which makes it easier for man-in-the-middle attackers to obtain sensitive information or interfere with communications by modifying the client-server data stream.

Affected configurations

NVD

Node

fortinetfortiosRange≤4.3.15

OR

fortinetfortiosMatch4.3.10

OR

fortinetfortiosMatch4.3.12

OR

fortinetfortiosMatch4.3.13

OR

fortinetfortiosMatch4.3.14

OR

fortinetfortiosMatch5.0.0

OR

fortinetfortiosMatch5.0.3

OR

fortinetfortiosMatch5.0.4

OR

fortinetfortiosMatch5.0.5

OR

fortinetfortiosMatch5.0.6

OR

fortinetfortiosMatch5.0.7

References

www.fortiguard.com/advisory/FG-IR-14-006/

www.kb.cert.org/vuls/id/730964

www.securityfocus.com/bid/69754

exchange.xforce.ibmcloud.com/vulnerabilities/96119

5.4 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.7%

Related for NVD:CVE-2014-0351

prion1 cve1 cvelist1 cert1 nessus1 openvas1 fortinet1