CVE-2015-8960 The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateT
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2015-8960?
CVE-2015-8960 is a high-severity vulnerability in Netapp Oncommand Shift, published on 21 Sep 2016.
Official description
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.
Weakness: CWE-295
Which versions are affected by CVE-2015-8960?
It affects 13 products.
Products include Ietf Transport Layer Security, Netapp Clustered Data Ontap Antivirus Connector, Netapp Data Ontap Edge, Netapp Host Agent, Netapp Oncommand Shift, Netapp Plug-in for Symantec Netbackup and 7 more.
How do I fix CVE-2015-8960?
No fix has been published for CVE-2015-8960 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-8960 being exploited?
There is no known exploitation of CVE-2015-8960 in the wild and no public exploit code.
Sources
Also known as GHSA-wxvr-h7g5-rfc7.