CVEvulnerability

CVE-2015-8960

8.1 HIGH Published 2016-09-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-09-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-295

Description

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

Affected configurations

• ietf transport layer security (<= 1.2) • netapp clustered data ontap antivirus connector • netapp data ontap edge • netapp host agent • netapp oncommand shift • netapp plug-in for symantec netbackup • netapp smi-s provider • netapp snap creator framework • netapp snapdrive • netapp snapmanager • netapp snapprotect • netapp solidfire \& hci management node • netapp system setup

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References