CVE-2015-5887

2015-10-0901:00:00

apple

www.cve.org

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.5%

JSON

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.