← Vulnerability feed

Vulnerability record · CVE-2015-8960 · published 21 September 2016

CVE-2015-8960: Ietf transport layer security improper certificate validation vulnerability

IIetf · Transport Layer Security

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

8.1 CVSS 3.1 High EPSS 1.9% · top 19.5% CWE-295 · Improper certificate validation
8.1CVSS 3.1 base score, v2 6.8
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
13Affected product versions listed by NVD
12References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

13 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://twitter.com/matthew_d_green/statuses/630908726950674433 Press/Media CoverageTechnical DescriptionThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4 Mailing ListTechnical DescriptionThird Party Advisory
http://www.securityfocus.com/bid/93071 Broken LinkThird Party AdvisoryVDB Entry
https://kcitls.org ExploitTechnical Description
https://security.netapp.com/advisory/ntap-20180626-0002/ Third Party Advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf ExploitMitigationTechnical Description
http://twitter.com/matthew_d_green/statuses/630908726950674433 Press/Media CoverageTechnical DescriptionThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4 Mailing ListTechnical DescriptionThird Party Advisory
http://www.securityfocus.com/bid/93071 Broken LinkThird Party AdvisoryVDB Entry
https://kcitls.org ExploitTechnical Description
https://security.netapp.com/advisory/ntap-20180626-0002/ Third Party Advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf ExploitMitigationTechnical Description

Track CVE-2015-8960 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-8735Apache Tomcat JmxRemoteLifecycleListener remote code executionApache Tomcat's JmxRemoteLifecycleListener was not updated to match the Oracle CVE-2016-3427 credential-type fix, leaving a deserialization weakness …KEVEPSS 90%analysed9.8CVE-2016-3427Oracle Java SE JMX Improper Access Control VulnerabilityCVE-2016-3427 is an unspecified vulnerability in Oracle Java SE 6u113, 7u99, 8u77, Java SE Embedded 8u77, and JRockit R28.3.9, reached through vector…KEVEPSS 92%analysed8.1CVE-2017-12617Apache Tomcat Default Servlet JSP upload leads to remote code executionApache Tomcat with HTTP PUT enabled (for example, the Default servlet readonly parameter set to false) allows an attacker to upload a JSP file throug…KEVEPSS 100%analysed8.1CVE-2017-12615Apache Tomcat on Windows unrestricted JSP upload via HTTP PUTApache Tomcat 7.0.0 through 7.0.79 on Windows with HTTP PUT enabled (for example, Default servlet readonly set to false) allows an attacker to upload…KEVEPSS 100%analysed9.8CVE-2021-3711OpenSSL SM2 decryption buffer overflowOpenSSL's SM2 decryption code miscalculates the output buffer size needed by EVP_PKEY_decrypt(), so the first sizing call can return a value smaller …EPSS 88%analysed9.8CVE-2018-11236Gnu glibc integer overflow vulnerabilitystdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath functi…EPSS 6.9%9.8CVE-2017-7525Fasterxml jackson-databind deserialization of untrusted data vulnerabilityA deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user …EPSS 38%9.8CVE-2017-15095Fasterxml jackson-databind deserialization of untrusted data vulnerabilityA deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perfo…EPSS 8.4%

Source: NIST National Vulnerability Database (record CVE-2015-8960), CISA KEV, FIRST EPSS (scores of 2026-11-13). This page is refreshed as NVD updates the record.