Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-4000
HistoryMay 21, 2015 - 12:59 a.m.

CVE-2015-4000

2015-05-2100:59:00
CWE-310
[email protected]
web.nvd.nist.gov
857
In Wild
2
cve-2015-4000
tls protocol
dhe_export
cipher-downgrade
logjam
nvd

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the “Logjam” issue.

References

Social References

More

Related

ibm 113
nessus 31
fedora 6
fortinet 1
atlassian 5
aix 1
debiancve 1
openvas 25
cisa 1
f5 2
oraclelinux 2
suse 2
prion 1
mozilla 1
amazon 1
osv 1
veracode 1
centos 1
mageia 1
citrix 1
debian 1
threatpost 1
ibm
ibm
Security Bulletin: IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments are vulnerabile to Logjam (CVE-2015-4000)
2020-07-16 06:39:01
Security Bulletin: Logjam vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-4000)
2019-01-31 02:25:02
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM DataQuant for Workstation (CVE-2015-4000)
2021-02-12 13:59:09
nessus
nessus
SUSE SLED11 / SLES11 Security Update : MySQL (SUSE-SU-2015:1177-1) (Logjam)
2015-07-06 00:00:00
AIX 7.1 TL 2 : sendmail (IV75645) (Logjam)
2015-08-11 00:00:00
SUSE SLES11 Security Update : mysql (SUSE-SU-2016:1618-1) (Logjam)
2016-08-29 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: nss-3.19.1-1.0.fc22
2015-06-02 15:17:04
[SECURITY] Fedora 21 Update: nss-util-3.19.1-1.0.fc21
2015-06-01 17:06:27
[SECURITY] Fedora 21 Update: nss-softokn-3.19.1-1.0.fc21
2015-06-01 17:06:26
fortinet
fortinet
CVE-2015-4000 "Logjam" attack
2015-05-20 00:00:00
atlassian
atlassian
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:35:17
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:35:17
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:43:18
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on AIX,Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2015-08-07 15:15:59
debiancve
debiancve
CVE-2015-4000
2015-05-21 00:59:00
openvas
openvas
SSL/TLS: 'DHE_EXPORT' Man in the Middle Security Bypass Vulnerability (LogJam)
2015-05-22 00:00:00
Mageia: Security Advisory (MGASA-2015-0260)
2015-10-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1526-1)
2021-06-09 00:00:00
cisa
cisa
OpenSSL Patches Multiple Vulnerabilities
2015-06-12 00:00:00
f5
f5
SOL16674 - TLS vulnerability CVE-2015-4000
2015-05-21 00:00:00
K16674 : TLS vulnerability CVE-2015-4000
2015-09-16 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-06-04 00:00:00
nss security update
2015-06-25 00:00:00
suse
suse
Security update for MySQL (important)
2015-07-02 21:05:19
Security update for MySQL (important)
2015-07-10 19:08:04
prion
prion
Code injection
2015-05-21 00:59:00
mozilla
mozilla
NSS accepts export-length DHE keys with regular DHE cipher suites — Mozilla
2015-07-02 00:00:00
amazon
amazon
Medium: nss, nss-util
2015-07-22 10:00:00
osv
osv
nss - security update
2016-06-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:06:07
centos
centos
openssl security update
2015-06-04 19:47:16
mageia
mageia
Updated filezilla package fixes security vulnerability
2015-07-05 20:22:03
citrix
citrix
CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability
2015-05-22 04:00:00
debian
debian
[SECURITY] [DLA 507-1] nss security update
2016-06-07 10:00:27
threatpost
threatpost
OpenSSL Patches Five Flaws, Adds Protection Against Logjam Attack
2015-06-11 13:48:27

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.8 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CVE-2015-4000
ibm113nessus31fedora6fortinet1atlassian5aix1debiancve1openvas25cisa1f52oraclelinux2suse2prion1mozilla1amazon1osv1veracode1centos1mageia1citrix1debian1threatpost1