NVD

Id
28947  
Name
CVE-2015-8960  
Description
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-20  
Modified Date
2016-11-28  
Seq
2015-8960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152596 28947 CVE-2015-8960 http://twitter.com/matthew_d_green/statuses/630908726950674433  View
152597 28947 CVE-2015-8960 [oss-security] 20160920 Re: Possible CVE for TLS protocol issue  View
152598 28947 CVE-2015-8960 93071  View
152599 28947 CVE-2015-8960 https://kcitls.org  View
152600 28947 CVE-2015-8960 https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11937 JVNDB-2015-007257 TLS プロトコルにおける TLS サーバになりすまされる脆弱性 TLS プロトコルは、ClientCertificateType の rsa_fixed_dh、dss_fixed_dh、rsa_fixed_ecdh、および ecdsa_fixed_ecdh 値をサポートしていますが、クライアントの秘密鍵、およびサーバの秘密鍵ではなく公開鍵を伴う特定の状況下におけるマスターシークレットを計算する機能 (ability to compute) について直接的に文書化していないため、TLS サーバになりすまされる可能性があります。 CVE-2015-8960 86185 CVE-2015-8960 28947 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007257.html 2015-08-10 2016-09-27 View