CVE-2015-2859
Severity Score
5.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Intel McAfee ePolicy Orchestrator (ePO) 4.x hasta 4.6.9 y 5.x hasta 5.1.2 no valida los nombres de servidores y los nombres de de autoridades certificadoras en los certificados X.509 de servidores SSL, lo que permite a atacantes man-in-the-middle falsificar servidores y obtener información sensible a través de un certificado manipulado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-04-03 CVE Reserved
- 2015-06-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-310: Cryptographic Issues
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/264092 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/75020 | Vdb Entry | |
| http://www.securitytracker.com/id/1032571 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://kc.mcafee.com/corporate/index?page=content&id=KB84628 | 2016-12-03 | |
| https://kc.mcafee.com/corporate/index?page=content&id=SB10120 | 2016-12-03 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.0" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.0" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.3 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.3" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.4 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.4" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.5 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.5" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.6 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.6" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.5.7 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.5.7" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.0" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.1 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.1" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.2 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.2" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.3 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.3" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.4 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.4" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.5 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.5" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.6 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.6" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.7 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.7" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.8 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.8" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 4.6.9 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "4.6.9" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 5.0.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.0.0" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 5.0.1 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.0.1" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 5.1.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.1.0" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 5.1.1 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.1.1" | - |
Affected
| ||||||
| Mcafee Search vendor "Mcafee" | Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator" | 5.1.2 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.1.2" | - |
Affected
| ||||||