Lucene search

K
cvelistRedhatCVELIST:CVE-2015-8838
HistoryMay 16, 2016 - 10:00 a.m.

CVE-2015-8838

2016-05-1610:00:00
redhat
raw.githubusercontent.com
1

5.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.5%

ext/mysqlnd/mysqlnd.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.