Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2015-4000
HistoryMay 21, 2015 - 12:00 a.m.

CVE-2015-4000

2015-05-2100:00:00
mitre
www.cve.org
1

4.9 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the “Logjam” issue.

References

Related

fedora 6
f5 1
oraclelinux 1
nessus 33
suse 2
openvas 29
amazon 1
cisa 1
ibm 106
prion 1
atlassian 6
mozilla 1
aix 1
fortinet 1
debiancve 1
mageia 1
osv 1
veracode 1
centos 1
debian 1
citrix 1
nvd 1
threatpost 1
ubuntucve 1
fedora
fedora
[SECURITY] Fedora 22 Update: nss-softokn-3.19.1-1.0.fc22
2015-06-02 15:17:04
[SECURITY] Fedora 22 Update: nss-util-3.19.1-1.0.fc22
2015-06-02 15:17:04
[SECURITY] Fedora 21 Update: nss-softokn-3.19.1-1.0.fc21
2015-06-01 17:06:26
f5
f5
SOL16674 - TLS vulnerability CVE-2015-4000
2015-05-21 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-06-04 00:00:00
nessus
nessus
Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150604) (Logjam)
2015-06-08 00:00:00
CentOS 6 / 7 : openssl (CESA-2015:1072) (Logjam)
2015-06-05 00:00:00
openSUSE Security Update : socat (openSUSE-2016-215) (Logjam)
2016-02-17 00:00:00
suse
suse
Security update for MySQL (important)
2015-07-02 21:05:19
Security update for MySQL (important)
2015-07-10 19:08:04
openvas
openvas
CentOS Update for nss CESA-2015:1185 centos6
2015-06-26 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-569)
2015-09-08 00:00:00
Fedora Update for nss-util FEDORA-2015-9130
2015-06-09 00:00:00
amazon
amazon
Medium: nss, nss-util
2015-07-22 10:00:00
cisa
cisa
OpenSSL Patches Multiple Vulnerabilities
2015-06-12 00:00:00
ibm
ibm
Security Bulletin: Logjam vulnerability affect IBM Cloud Manager with Openstack (CVE-2015-4000)
2018-08-08 04:13:55
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Security Access Manager for Web and IBM Tivoli Access Manager for e-business (CVE-2015-4000)
2018-06-16 21:25:51
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM i (CVE-2015-4000)
2019-12-18 14:26:38
prion
prion
Code injection
2015-05-21 00:59:00
atlassian
atlassian
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:43:18
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:35:17
Update Java version bundled found in the installer to a version >= 1.8u51
2015-07-15 01:35:17
mozilla
mozilla
NSS accepts export-length DHE keys with regular DHE cipher suites — Mozilla
2015-07-02 00:00:00
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on AIX,Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2015-08-07 15:15:59
fortinet
fortinet
CVE-2015-4000 "Logjam" attack
2015-05-20 00:00:00
debiancve
debiancve
CVE-2015-4000
2015-05-21 00:59:00
mageia
mageia
Updated filezilla package fixes security vulnerability
2015-07-05 20:22:03
osv
osv
nss - security update
2016-06-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:06:07
centos
centos
openssl security update
2015-06-04 19:47:16
debian
debian
[SECURITY] [DLA 507-1] nss security update
2016-06-07 10:00:27
citrix
citrix
CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability
2015-05-22 04:00:00
nvd
nvd
CVE-2015-4000
2015-05-21 00:59:00
threatpost
threatpost
OpenSSL Patches Five Flaws, Adds Protection Against Logjam Attack
2015-06-11 13:48:27
ubuntucve
ubuntucve
CVE-2015-4000
2015-05-20 00:00:00

4.9 Medium

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVELIST:CVE-2015-4000
fedora6f51oraclelinux1nessus33suse2openvas29amazon1cisa1ibm106prion1atlassian6mozilla1aix1fortinet1debiancve1mageia1osv1veracode1centos1debian1citrix1nvd1threatpost1ubuntucve1