An OpenSSL client will accept the use of an RSA temporary key in a non-export RSA key exchange ciphersuite. A server could present a weak temporary key and downgrade the security of the session.

cisa 1

cisco 1

f5 4

openvas 25

ibm 78

hackerone 1

debiancve 2

checkpoint_security 1

nessus 42

cert 1

prion 6

cve 6

fortinet 1

veracode 1

thn 2

cvelist 6

ubuntucve 2

nvd 6

checkpoint_advisories 2

debian 1

osv 1

kitploit 1

oraclelinux 2

redhat 1

securityvulns 1

aix 1

centos 1

ubuntu 1

cloudfoundry 1

cisa

FREAK

2015-03-06 00:00:00

cisco

OpenSSL RSA Temporary Key Cryptographic Downgrade Vulnerability

2015-01-13 19:57:19

K16139 : OpenSSL vulnerability CVE-2015-0204

2015-10-02 00:00:00

SOL16139 - OpenSSL vulnerability CVE-2015-0204

2015-02-12 00:00:00

SOL16903 - Microsoft Schannel vulnerability CVE-2015-1637

2015-07-13 00:00:00

openvas

SSL/TLS: RSA Temporary Key Handling 'RSA_EXPORT' Downgrade Issue (FREAK)

2015-03-06 00:00:00

DTLS: Deprecated DTLSv1.0 Detection

2024-01-09 00:00:00

OpenSSL Information Disclosure Vulnerability (20150319 - 4) - Windows

2021-07-29 00:00:00

ibm

Security Bulletin: OpenSSL vulnerabilities for Rational Automation Framework Security Advisory (CVE-2015-0204)

2018-06-17 05:01:24

Security Bulletin: Vulnerability in OpenSSL affects IBM XIV Storage System Gen3 and Gen2 (CVE-2015-0204)

2018-06-18 00:09:22

Security Bulletin: FREAK vulnerability in TLS/SSL affects IBM CICS Transaction Gateway (CVE-2015-0204)

2018-06-15 07:02:44

hackerone

Internet Bug Bounty: FREAK: Factoring RSA_EXPORT Keys to Impersonate TLS Servers

2015-03-05 16:18:06

debiancve

CVE-2015-0204

2015-01-09 02:59:10

CVE-2015-2319

2018-01-08 19:29:00

checkpoint_security

Check Point response to TLS FREAK Attack (CVE-2015-0204)

2015-03-03 22:00:00

nessus

Xerox WorkCentre 6400 OpenSSL RSA Temporary Key Handling EXPORT_RSA Ciphers Downgrade MitM (XRX15AP) (FREAK)

2015-12-11 00:00:00

F5 Networks BIG-IP : OpenSSL vulnerability (SOL16139) (FREAK)

2015-10-05 00:00:00

Blue Coat ProxySG 6.5.x / 6.2.x / 5.5 OpenSSL Vulnerability (FREAK)

2015-04-09 00:00:00

cert

SSL/TLS implementations accept export-grade RSA keys (FREAK attack)

2015-03-06 00:00:00

prion

Code injection

2015-01-09 02:59:00

Design/Logic Flaw

2018-01-08 19:29:00

Design/Logic Flaw

2015-08-20 10:59:00

cve

CVE-2015-0204

2015-01-09 02:59:10

CVE-2015-0535

2015-08-20 10:59:02

CVE-2015-0138

2015-03-25 01:59:17

fortinet

TLS FREAK Attack

2015-03-04 00:00:00

veracode

Brute Force Decryption

2017-02-10 01:27:34

thn

'FREAK' — New SSL/TLS Vulnerability Explained

2015-03-03 20:30:00

OpenSSL to Patch Undisclosed High Severity Vulnerability this Thursday

2015-07-06 22:12:00

cvelist

CVE-2015-0204

2015-01-09 02:00:00

CVE-2015-0535

2015-08-20 10:00:00

CVE-2015-2319

2018-01-08 19:00:00

ubuntucve

CVE-2015-0204

2015-01-08 00:00:00

CVE-2015-2319

2015-03-18 00:00:00

nvd

CVE-2015-0204

2015-01-09 02:59:10

CVE-2015-0138

2015-03-25 01:59:17

CVE-2015-2319

2018-01-08 19:29:00

checkpoint_advisories

SSL Export Cipher Suite (CVE-2015-0204; CVE-2015-1637)

2015-03-04 00:00:00

OpenSSL TLS Export Cipher Suite Downgrade (CVE-2015-0204; CVE-2015-1637)

2015-03-04 00:00:00

debian

[SECURITY] [DLA 132-1] openssl security update

2015-01-11 13:16:17

osv

openssl - security update

2015-01-11 00:00:00

kitploit

A2SV - Auto Scanning to SSL Vulnerability

2016-08-06 14:46:00

oraclelinux

openssl security update

2015-02-26 00:00:00

openssl security update

2015-01-20 00:00:00

redhat

(RHSA-2015:0066) Moderate: openssl security update

2015-01-20 00:00:00

securityvulns

[USN-2459-1] OpenSSL vulnerabilities

2015-01-13 00:00:00

aix

Multiple Security vulnerabilities in AIX OpenSSL

2015-02-04 06:24:41

centos

openssl security update

2015-01-20 21:00:39

ubuntu

OpenSSL vulnerabilities

2015-01-12 00:00:00

cloudfoundry

USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry

2015-03-21 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.948

Percentile

99.3%

JSON

Related for OPENSSL:CVE-2015-0204