VULNERABILITY INTELLIGENCE
CVE-2015-2859
CVSS score5.8 MEDIUM
EPSS probability1.02%
CISA KEVNot currently listed
Published2015-06-23
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Primary references
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org
- cret@cert.org
- cret@cert.org — Patch, Vendor Advisory
- cret@cert.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory