CVE-2015-4288

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance (WSA) version 8.5.0-000 Cisco Email Security Appliance (ESA) version 8.5.7-042 Cisco Content Security Management Appliance (SMA) version 8.3.6-048

Description The issue concerns the LDAP implementation, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Recommendations For Cisco Web Security Appliance (WSA) version 8.5.0-000, update to a version that includes the fix for this issue. For Cisco Email Security Appliance (ESA) version 8.5.7-042, update to a version that includes the fix for this issue. For Cisco Content Security Management Appliance (SMA) version 8.3.6-048, update to a version that includes the fix for this issue.