The vulnerability of the BN_mod_exp function (crypto/bn/asm/x86_64-mont5.pl) in the OpenSSL library, which allows a perpetrator to gain unauthorized access to confidential data

🗓️ 26 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

BN_mod_exp flaw in OpenSSL allows remote attackers to access confidential data via unprotected service data.

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-3193, CVE-2015-3195, CVE-2015-1794)	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM MQ Light (CVE-2015-3193, CVE-2015-3194)	15 Jun 201807:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilites impacting IBM Aspera Connect 3.7.4 and earlier (CVE-2017-3732, CVE-2016-7055)	24 Apr 202023:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2016-0701)	16 Jun 201814:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Express.	10 Nov 202212:20	–	ibm

Vulners

Node

openssl opensslRange1.0.2–1.0.2d

OR

canonical ubuntuMatch15.04

OR

canonical ubuntuMatch15.10

Source	Link
usn	www.usn.ubuntu.com/2830-1/
openssl	www.openssl.org/news/secadv/20151203.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-3193
security-tracker	www.security-tracker.debian.org/tracker/CVE-2015-3193
web	www.web.nvd.nist.gov/view/vuln/detail

26 Jun 2020 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 37.5

CVSS 27.8

EPSS0.25137

modular exponentiation flaw OpenSSL vulnerability remote attacker access confidential data exposure service data protection