CVE-2015-8960 - The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue

Back Back to CVE browser

HIGH

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue

Published Sep 21, 2016

8.1

HIGH

CVSS 3.1

EPSS 1.95%

Description

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (6)

http://twitter.com/matthew_d_green/statuses/630908726950674433
x_refsource_MISCPress/Media CoverageTechnical DescriptionThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4
mailing-listx_refsource_MLISTMailing ListTechnical DescriptionThird Party Advisory
http://www.securityfocus.com/bid/93071
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://kcitls.org
x_refsource_MISCExploitTechnical Description
https://security.netapp.com/advisory/ntap-20180626-0002/
x_refsource_CONFIRMThird Party Advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf
x_refsource_MISCExploitMitigationTechnical Description

Link	Providers	Tags
http://twitter.com/matthew_d_green/statuses/630908726950674433		x_refsource_MISCPress/Media CoverageTechnical DescriptionThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4		mailing-listx_refsource_MLISTMailing ListTechnical DescriptionThird Party Advisory
http://www.securityfocus.com/bid/93071		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://kcitls.org		x_refsource_MISCExploitTechnical Description
https://security.netapp.com/advisory/ntap-20180626-0002/		x_refsource_CONFIRMThird Party Advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf		x_refsource_MISCExploitMitigationTechnical Description