High severity8.1NVD Advisory· Published Sep 21, 2016· Updated Jun 17, 2026
CVE-2015-8960
CVE-2015-8960
Description
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16- cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:host_agent:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*+ 1 more
- cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
- cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
- cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:system_setup:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- kcitls.orgnvdExploitTechnical Description
- www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdfnvdExploitMitigationTechnical Description
- twitter.com/matthew_d_green/statuses/630908726950674433nvdPress/Media CoverageTechnical DescriptionThird Party Advisory
- www.openwall.com/lists/oss-security/2016/09/20/4nvdMailing ListTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/93071nvdBroken LinkThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20180626-0002/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.