CVE-2019-1970

CVE-2019-1970 affects Cisco Firepower Threat Defense (FTD) Software: the SSL/TLS protocol inspection engine contains errors when handling specific SSL/TLS messages, allowing an unauthenticated, remote attacker to bypass configured file policies by sending crafted HTTP packets and potentially deli...

CVE-2019-1970 Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors...