CVE-2015-8960 The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute th...
HighCVSS 8.1
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ietf transport layer security | <= 1.2 | No fix listed |
| netapp clustered data ontap antivirus connector | All versions | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp host agent | All versions | No fix listed |
| netapp oncommand shift | All versions | No fix listed |
| netapp plug-in for symantec netbackup | All versions | No fix listed |
| netapp smi-s provider | All versions | No fix listed |
| netapp snap creator framework | All versions | No fix listed |
| netapp snapdrive | All versions | No fix listed |
| netapp snapmanager | All versions | No fix listed |
| netapp snapprotect | All versions | No fix listed |
| netapp solidfire hci management node | All versions | No fix listed |
| netapp system setup | All versions | No fix listed |
References
- twitter.com press-media-coverage technical-description third-party-advisory
- [oss-security] 20160920 Re: Possible CVE for TLS protocol issue mailing-list technical-description third-party-advisory
- 93071 broken-link third-party-advisory vdb-entry
- kcitls.org exploit technical-description
- security.netapp.com third-party-advisory
- www.usenix.org exploit mitigation technical-description