NVD

Id
82293  
Name
CVE-2016-0270  
Description
IBM Domino 9.0.1 Fix Pack 3 Interim Fix 2 through 9.0.1 Fix Pack 5 Interim Fix 1, when using TLS and AES GCM, uses random nonce generation, which makes it easier for remote attackers to obtain the authentication key and spoof data by leveraging the reuse of a nonce in a session and a "forbidden attack." NOTE: this CVE has been incorrectly used for GCM nonce reuse issues in other products; see CVE-2016-10213 for the A10 issue, CVE-2016-10212 for the Radware issue, and CVE-2017-5933 for the Citrix issue.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-02-15  
Published
2017-02-08  
Modified Date
2017-02-15  
Seq
2016-0270  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
406276 82293 CVE-2016-5545 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html  View
406277 82293 CVE-2016-5545 95590  View
406848 82293 CVE-2017-3246 1037639  View
406849 82293 CVE-2017-3246 1037639  View

Related JVN