CVEvulnerability

CVE-2015-2859

5.8 MEDIUM Published 2015-06-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-06-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-310

Description

Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected configurations

• mcafee epolicy orchestrator 4.0 • mcafee epolicy orchestrator 4.5.0 • mcafee epolicy orchestrator 4.5.3 • mcafee epolicy orchestrator 4.5.4 • mcafee epolicy orchestrator 4.5.5 • mcafee epolicy orchestrator 4.5.6 • mcafee epolicy orchestrator 4.5.7 • mcafee epolicy orchestrator 4.6.0 • mcafee epolicy orchestrator 4.6.1 • mcafee epolicy orchestrator 4.6.2 • mcafee epolicy orchestrator 4.6.3 • mcafee epolicy orchestrator 4.6.4 • mcafee epolicy orchestrator 4.6.5 • mcafee epolicy orchestrator 4.6.6 • mcafee epolicy orchestrator 4.6.7 • mcafee epolicy orchestrator 4.6.8 • mcafee epolicy orchestrator 4.6.9 • mcafee epolicy orchestrator 5.0.0 • mcafee epolicy orchestrator 5.0.1 • mcafee epolicy orchestrator 5.1.0 • mcafee epolicy orchestrator 5.1.1 • mcafee epolicy orchestrator 5.1.2

Related

Weakness · not in database (1)

References