Vulnerability Bulletins |
Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products |
|
| Affected software | Cisco |
|
On January 28, 2016, the OpenSSL Project released a security advisory detailing two vulnerabilities.Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks on an SSL/TLS connection.This advisory will be updated as additional information becomes available.Cisco will release software updates that address these vulnerabilities.Workarounds that address these More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160129-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20(January%202016)%20Affecting%2 |
|