CVE-2015-4000

high-risk
Published 2015-05-21

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Do I need to act?

!
93.9% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.7/10 Low
NETWORK / HIGH complexity

Affected Products (20)

Jdk
Jdk
Jdk
Jdk
Jre
Jre
Jre
Jre

Affected Vendors

Opera Openssl Suse Ibm Apple Google Oracle Debian Canonical Hp Mozilla Microsoft

References (434)

Third Party Advisory http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc
Third Party Advisory http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chai...
Mailing List http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc
Third Party Advisory http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402
Third Party Advisory http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778
Third Party Advisory http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681
Third Party Advisory http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727
Mailing List http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
Mailing List http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html
Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html
Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html
and 414 more references
57
/ 100
high-risk
Severity 13/34 · Low
Exploitability 20/34 · Moderate
Exposure 24/34 · High