high8.1

CVE-2015-8960

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not di…

Impact

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

Affected products

Vendor	Product	Affected versions
Ietf	Transport Layer Security	through 1.2
Netapp	Clustered Data Ontap Antivirus Connector	All versions
Netapp	Data Ontap Edge	All versions
Netapp	Host Agent	All versions
Netapp	Oncommand Shift	All versions
Netapp	Plug-In For Symantec Netbackup	All versions
Netapp	Smi-S Provider	All versions
Netapp	Snap Creator Framework	All versions
Netapp	Snapdrive	All versions
Netapp	Snapmanager	All versions
Netapp	Snapprotect	All versions
Netapp	Solidfire \& Hci Management Node	All versions

Weakness classification

CWE-295

Impact

Affected products

Weakness classification

References