CVE-2015-8960

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

CVSS v3.0 8.1 HIGH
CVSS v2.0 6.8 MEDIUM

8.1^/10

CVSS v3.0 : HIGH

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf	Technical Description
http://twitter.com/matthew_d_green/statuses/630908726950674433	Press/Media Coverage
http://www.openwall.com/lists/oss-security/2016/09/20/4	Mailing List Third Party Advisory
https://kcitls.org	Technical Description
http://www.securityfocus.com/bid/93071
https://security.netapp.com/advisory/ntap-20180626-0002/

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:microsoft:internet_explorer::::::::
	cpe:2.3:a:opera:opera::::::::
	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:a:google:chrome::::::::

Information

Published : 2016-09-21 02:59

Updated : 2018-06-28 01:29

NVD link : CVE-2015-8960

Mitre link : CVE-2015-8960

JSON object : View

Products Affected

microsoft

internet_explorer

opera

opera

mozilla

firefox

google

chrome

apple

safari

CWE

CWE-310

Cryptographic Issues

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf", "name": "https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf", "tags": ["Technical Description"], "refsource": "MISC"}, {"url": "http://twitter.com/matthew_d_green/statuses/630908726950674433", "name": "http://twitter.com/matthew_d_green/statuses/630908726950674433", "tags": ["Press/Media Coverage"], "refsource": "MISC"}, {"url": "http://www.openwall.com/lists/oss-security/2016/09/20/4", "name": "[oss-security] 20160920 Re: Possible CVE for TLS protocol issue", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "https://kcitls.org", "name": "https://kcitls.org", "tags": ["Technical Description"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/93071", "name": "93071", "tags": [], "refsource": "BID"}, {"url": "https://security.netapp.com/advisory/ntap-20180626-0002/", "name": "https://security.netapp.com/advisory/ntap-20180626-0002/", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the \"Key Compromise Impersonation (KCI)\" issue."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-310"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-8960", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}}, "publishedDate": "2016-09-21T02:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-06-28T01:29Z"}