CVE-2015-2323

Published: Aug 11, 2015Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets.

Affected (16)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.0.0
Fortinet Fortios	Version 5.0.10
Fortinet Fortios	Version 5.0.11
Fortinet Fortios	Version 5.0.1
Fortinet Fortios	Version 5.0.2
Fortinet Fortios	Version 5.0.3
Fortinet Fortios	Version 5.0.4
Fortinet Fortios	Version 5.0.5
Fortinet Fortios	Version 5.0.6
Fortinet Fortios	Version 5.0.7
Fortinet Fortios	Version 5.0.8
Fortinet Fortios	Version 5.0.9
Fortinet Fortios	Version 5.2.0
Fortinet Fortios	Version 5.2.1
Fortinet Fortios	Version 5.2.2
Fortinet Fortios	Version 5.2.3