NVD

Id
23009  
Name
CVE-2015-0535  
Description
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a similar issue to CVE-2015-0204.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-20  
Modified Date
2016-11-28  
Seq
2015-0535  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
122571 23009 CVE-2015-0535 20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities  View
122572 23009 CVE-2015-0535 76377  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9010 JVNDB-2015-004330 EMC RSA BSAFE Micro Edition Suite および RSA BSAFE SSL-C における EXPORT_RSA 暗号ダウングレード攻撃を実行される脆弱性 EMC RSA BSAFE Micro Edition Suite (MES) および RSA BSAFE SSL-C は、TLS ステートの遷移を適切に制限しないため、EXPORT_RSA 暗号ダウングレード攻撃を実行される脆弱性が存在します。 CVE-2015-0535 77746 CVE-2015-0535 23009 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004330.html 2015-08-17 2015-08-25 View