CVE-2015-1793

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.

Severity	MEDIUM
CVSS	6.5
CWE	CWE-254
KEV
Published	10 years ago
Modified	1 week ago

Related Products

Product	Advisory	Evidence
Plug-in for OpenFlow	cisco-sa-20150710-openssl	Cisco OpenVuln
Intrusion Prevention System (IPS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco onePK All-in-One Virtual Machine	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Wireless LAN Controller (WLC)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Webex Meetings	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco WebEx Node for MCS	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco WebEx Meetings for Android	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco WebEx Meetings Server	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco WebEx Connect	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Web Security Appliance (WSA)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Virtualization Experience Media Engine	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Virtual Security Gateway for Nexus 1000V Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Videoscape Distribution Suite Service Broker	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Videoscape Control Suite	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance PTZ IP Cameras	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance Operations Manager Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance Media Server Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance 7000 Series IP Cameras	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance 6000 Series IP Cameras	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance 4000 Series IP Camera	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Video Surveillance 3000 Series IP Cameras	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Universal Small Cell Series Firmware	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unity Connection	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unity	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified SIP Proxy	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Presence Server	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Intelligence Center	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified IP Phones 9900 Series Firmware	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified IP Phone 8900 Series	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified IP Conference Station 7937G Firmware	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Contact Center Express	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Contact Center Enterprise	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Contact Center	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Computing System Central Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Communications Manager	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Communications Domain Manager	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Unified Attendant Console	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Telepresence Conductor	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TX9000	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TX900	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TX1310 65	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TX1300 47	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TE Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence TC Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence System Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Supervisor MSE 8050 Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Server Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Server	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Serial Gateway Series	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence MCU Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence ISDN Link	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence ISDN GW 3241	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence Advanced Media Gateway	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco TelePresence	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco SocialMiner	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Show and Share	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Security Manager	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Secure Web Appliance	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Secure Client	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Registered Envelope Service	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Security Manager (PRSM)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Optical	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Network Services Controller	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Network Registrar	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Network	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime License Manager	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime LAN Management Solution (LMS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Infrastructure	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime IP Express	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Data Center Network Manager (DCNM)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Collaboration Provisioning	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Collaboration Deployment	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Collaboration	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Prime Access Registrar	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Plug-in for OpenFlow	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Physical Access Gateway	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Packet Tracer	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco ONS 15454 System Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Nexus 1000V Switch	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Network Analysis Module (NAM) Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Network Admission Control Guest Server	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco NX-OS Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco NAC Appliance Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Model D9485 DAVIC QPSK Mod / Demod	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MeetingPlace Server	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MediaSense	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MDS SAN-OS Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MATE Live	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MATE Design	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco MATE Collector	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Jabber for Windows	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Jabber Software Development Kit	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Jabber IM for Android	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Jabber	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco IronPort Encryption Appliance	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Intrusion Prevention System (IPS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Identity Services Engine Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco IP Interoperability and Collaboration System (IPICS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco IOS XE Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco IOS	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Firepower System Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Finesse	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Expressway	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Enterprise Content Delivery System (ECDS)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Emergency Responder	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Email Security Appliance (ESA)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Edge 300 Series	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Digital Media Player Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Computer Telephony Integration (CTI) Option	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Application Policy Infrastructure Controller (APIC)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Application Networking Manager (ANM)	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco AnyConnect Secure Mobility Client	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco ATA 187 Analog Telephone Adaptor	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco ASR 5000 Series Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco ASA CX Context-Aware Security Software	cisco-sa-20150710-openssl	Cisco OpenVuln
Cisco Catalyst 9600 Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches	cisco-sa-20150710-openssl	Cisco OpenVuln · software-dependent