Cisco Firepower Threat Defense SSL/TLS协议解析器安全漏洞

漏洞信息详情

Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。

Cisco FTD中的SSL/TLS协议解析器存在安全漏洞，该漏洞源于程序没有正确解析TLS数据包头中的属性。远程攻击者可通过发送恶意的TLS消息利用该漏洞绕过被配置的策略。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-ftd-ssltls-bypass

来源:BID

链接:http://www.securityfocus.com/bid/108338

来源:www.cisco.com

链接:http://www.cisco.com/

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-ftdde-poly-bypass

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-ftd-ssltls-bypass

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-1833

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.1778/

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/108338

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/81190

暂无