CVE-2015-5965 | BDVDB-2026-70890 Detail

Description#

The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/76065
http://www.fortiguard.com/advisory/FG-IR-15-016/
http://www.securitytracker.com/id/1033256
https://security.gentoo.org/glsa/201508-01
https://vivaldi.net/en-US/blogs/entry/the-poodle-has-friends

Exploit#

No public exploit known

History#

Version 12015-08-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.