CSCvq07297 - HTTP Filtering Bypass Vulnerability

[edwin.chin-c]

Hi, 

Does anyone know what does the known affected release for the bug CSCvq07297 means?

Is it referring to the Snort Version?

The link to the bug is as below:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq07297

Thank you in advance.

[Rahul Govindan]

It does seem that way. Unfortunately, there is no other info either on the advisory page or the bug details. If snort 2.9 is affected, then all the current releases of FTD and Firepower should be affected. This is mentioned in the bug

"At the time of publication, this vulnerability affected all releases of Cisco FTD Software."