Lucene search

K
cvelistRedhatCVELIST:CVE-2015-3152
HistoryMay 16, 2016 - 10:00 a.m.

CVE-2015-3152

2016-05-1610:00:00
redhat
raw.githubusercontent.com

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a “BACKRONYM” attack.