CVE-2015-8960 : The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

Published 2016-09-21 02:59:00

Updated 2023-01-30 17:33:01

Source Red Hat, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2015-8960

EPSS FAQ

0.64%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-8960

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2015-8960

http://www.securityfocus.com/bid/93071

TLS CVE-2015-8960 Man in the Middle Security Bypass Vulnerability
Broken Link;Third Party Advisory;VDB Entry
https://kcitls.org

KCI Attacks against TLS
Exploit;Technical Description
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf

Exploit;Mitigation;Technical Description
https://security.netapp.com/advisory/ntap-20180626-0002/

CVE-2015-8960 TLS Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4

oss-security - Re: Possible CVE for TLS protocol issue
Mailing List;Technical Description;Third Party Advisory
http://twitter.com/matthew_d_green/statuses/630908726950674433

Matthew Green on Twitter: "This attack is hilarious. Install a client cert in a browser, MITM any connection it makes to certain servers. https://t.co/A1O2bQTOiE"
Press/Media Coverage;Technical Description;Third Party Advisory

Products affected by CVE-2015-8960

Ietf » Transport Layer Security
Versions up to, including, (<=) 1.2
cpe:2.3:a:ietf:transport_layer_security:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Safari » Version: N/A
When used together with: Google » Chrome » Version: N/A
When used together with: Microsoft » Internet Explorer » Version: N/A
When used together with: Mozilla » Firefox » Version: N/A
When used together with: Opera » Opera Browser » Version: N/A
Netapp » Snap Creator Framework » Version: N/A
cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
Matching versions
Netapp » Snapdrive » Version: N/A For Unix
cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*
Matching versions
Netapp » Snapdrive » Version: N/A For Windows
cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*
Matching versions
Netapp » Snapmanager » Version: N/A For Oracle
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
Matching versions
Netapp » Snapmanager » Version: N/A For SAP
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
Matching versions
Netapp » Data Ontap Edge » Version: N/A
cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
Matching versions
Netapp » Clustered Data Ontap Antivirus Connector » Version: N/A
cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
Matching versions
Netapp » Host Agent » Version: N/A
cpe:2.3:a:netapp:host_agent:-:*:*:*:*:*:*:*
Matching versions
Netapp » Smi-s Provider » Version: N/A
cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
Matching versions
Netapp » Oncommand Shift » Version: N/A
cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*
Matching versions
Netapp » Snapprotect » Version: N/A
cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
Matching versions
Netapp » Solidfire & Hci Management Node » Version: N/A
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Matching versions
Netapp » Plug-in For Symantec Netbackup » Version: N/A
cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*
Matching versions
Netapp » System Setup » Version: N/A
cpe:2.3:a:netapp:system_setup:-:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-8960

Exploit prediction scoring system (EPSS) score for CVE-2015-8960

CVSS scores for CVE-2015-8960

CWE ids for CVE-2015-8960

References for CVE-2015-8960

Products affected by CVE-2015-8960