CVE-2015-4000

Summary

CVECVE-2015-4000
StatePUBLISHED
Assignermitre
Source PriorityCVE Program / NVD first with legacy fallback
Published2015-05-21 00:59:00 UTC
Updated2026-05-06 22:30:45 UTC
DescriptionThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Risk And Classification

Primary CVSS: v3.0 3.7 LOW from [email protected]

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Problem Types: CWE-310 | n/a


VersionSourceTypeScoreSeverityVector
3.0[email protected]Primary3.7LOWCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
2.0[email protected]Primary4.3AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS v3.0 Breakdown

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2.0 Breakdown

Access Vector
Network
Access Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None

AV:N/AC:M/Au:N/C:N/I:P/A:N

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Canonical Ubuntu Linux 12.04 All All All
Operating System Canonical Ubuntu Linux 14.04 All All All
Operating System Canonical Ubuntu Linux 14.10 All All All
Operating System Canonical Ubuntu Linux 15.04 All All All
Application Openssl Openssl All All All All
Application Openssl Openssl All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Na N/a affected n/a Not specified

References

ReferenceSourceLinkTags
[security-announce] SUSE-SU-2015:1185-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM® DB2® LUW (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
Debian -- Security Information -- DSA-3287-1 openssl af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20566.www2.hpe.com Third Party Advisory
[security-announce] openSUSE-SU-2015:1289-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
'[security bulletin] HPSBMU03345 rev.1 - HP Network Node Manager i (NNMi) and Smart Plugins (iSPIs) f' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational Software Architect , Rational Software Architect for Websphere software and Rational Software Architect Real Time (CVE-2015-4000, CVE-2015-0488, CVE-2015-0478, CVE-2015-02 af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM FileNet Content Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Rational Software Architect TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Juniper Junos TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
oss-security - CVE-2015-4000 - TLS does not properly convey server's ciphersuite choice af854a3a-2127-422b-91ae-364da2661108 openwall.com Mailing List, Third Party Advisory
weakdh.org/imperfect-forward-secrecy.pdf af854a3a-2127-422b-91ae-364da2661108 weakdh.org Third Party Advisory
IBM WebSphere MQ Telemetry TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Rational ClearCase (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
[security-announce] SUSE-SU-2016:0224-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM notice: The page you requested cannot be displayed af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Lotus Quickr for WebSphere Portal TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
OpenSSL: Multiple vulnerabilities (GLSA 201506-02) — Gentoo security af854a3a-2127-422b-91ae-364da2661108 security.gentoo.org Third Party Advisory
StruxureWare Data Center Operation Software Vulnerability Fixes - User Assistance for StruxureWare Data Center Operation 8 - Help Center: Support for EcoStruxure IT, StruxureWare for Data Centers, and NetBotz af854a3a-2127-422b-91ae-364da2661108 help.ecostruxureit.com Third Party Advisory
openSUSE-SU-2015:1684-1: moderate: Security update for apache2 af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM WebSphere MQ Internet Passthru (CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
'[security bulletin] HPSBUX03388 SSRT102180 rev.1 - HP-UX running OpenSSL, Remote Disclosure of Infor' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20566.www2.hpe.com Third Party Advisory
HP Operations Manager for Windows TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
HPE integrated Lights Out (iLO) TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[SECURITY] Fedora 21 Update: nss-3.19.1-1.0.fc21 af854a3a-2127-422b-91ae-364da2661108 lists.fedoraproject.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM Security Network Protection TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
'[security bulletin] HPSBGN03402 rev.2 - HP Performance Manager, Remote Disclosure of Information' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM Tivoli Composite Application Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
USN-2656-2: Firefox vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
HP Network Node Manager iTLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
FortiGuard af854a3a-2127-422b-91ae-364da2661108 fortiguard.com Third Party Advisory
HP Discovery & Dependency Mapping Inventory TLS RC4 Algorithm Lets Remote Users Decrypt Data - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[SECURITY] Fedora 20 Update: nss-3.19.1-1.0.fc20 af854a3a-2127-422b-91ae-364da2661108 lists.fedoraproject.org Mailing List, Third Party Advisory
HP Support document - HP Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
IBM Rational Team Concert TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1183-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
'[security bulletin] HPSBGN03362 rev.1 - HP Discovery and Dependency Mapping Inventory (DDMI) with TL' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM Rational Build Forge TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Oracle Secure Global Desktop TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
McAfee Firewall Enterprise TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Security Network Protection (CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
IBM Content Manager Enterprise Edition TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
'[security bulletin] HPSBGN03399 rev.1 - HP BSM Connector (BSMC), Remote Unauthorized Modification, D' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Monitoring (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
IBM Rational ClearCase TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
'[security bulletin] HPSBGN03411 rev.1 - HP Operations Agent Virtual Appliance, Remote Unauthorized D' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM SPSS Modeler TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM® WebSphere Real Time (CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM SPSS Modeler (CVE-2015-4000, CVE-2015-0478, CVE-2015-0488) af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
SolarWinds Storage Manager Release Notes af854a3a-2127-422b-91ae-364da2661108 www.solarwinds.com Third Party Advisory
FortiGuard af854a3a-2127-422b-91ae-364da2661108 www.fortiguard.com Third Party Advisory
Debian -- Security Information -- DSA-3688-1 nss af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM Rational Quality Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
'[security bulletin] HPSBUX03512 SSRT102254 rev.1 - HP-UX Web Server Suite running Apache, Remote Den' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Oracle Critical Patch Update - July 2015 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects FileNet Content Manager, IBM Content Foundation and FileNet BPM (CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Oracle Critical Patch Update Advisory - January 2021 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
Debian -- Security Information -- DSA-3316-1 openjdk-7 af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
'[security bulletin] HPSBGN03404 rev.1 - HP Service Health Reporter, Remote Unauthorized Modification' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
NetBSD TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] openSUSE-SU-2015:1288-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Oracle Communications Messaging Server TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1181-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM SPSS Analytic Server TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] openSUSE-SU-2015:1139-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM WebSphere MQ Telemetry (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
www.openssl.org/news/secadv_20150611.txt af854a3a-2127-422b-91ae-364da2661108 www.openssl.org Vendor Advisory
CVE-2015-4000 Diffie-Hellman Export Cipher Suite vulnerability in Multiple NetApp Products | NetApp Product Security af854a3a-2127-422b-91ae-364da2661108 security.netapp.com Third Party Advisory
HPE Service Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Tivoli Netcool System Service Monitor TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
USN-2656-1: Firefox vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
IBM Tivoli Storage Manager FastBack for Workstations TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
'[security bulletin] HPSBGN03373 rev.1 - HP Release Control running TLS, Remote Disclosure of Informa' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
Broadcom Support Portal af854a3a-2127-422b-91ae-364da2661108 bto.bluecoat.com Third Party Advisory
IBM Lotus Notes and Domino TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1269-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Oracle Java SE Multiple Flaws Lets Local and Remote Users Gain Elevated Privileges and Remote Users Partially Access Data, Modify Data, and Deny Service - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Tivoli Monitoring TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM AIX TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Mozilla Thunderbird Multiple Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, and Bypass Security Restrictions - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Oracle Critical Patch Update - October 2015 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
IBM Cognos Mobile App TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
Apache TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Weak Diffie-Hellman and the Logjam Attack af854a3a-2127-422b-91ae-364da2661108 weakdh.org Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
'[security bulletin] HPSBGN03361 rev.1 - HP UCMDB, HP UCMDB Configuration Manager, HP UCMDB Browser, ' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Debian -- Security Information -- DSA-3324-1 icedove af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
[security-announce] openSUSE-SU-2015:1229-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
[security-announce] openSUSE-SU-2016:0255-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
SSL/TLS LogJam Man in the Middle Security Bypass Vulnerability af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Third Party Advisory, VDB Entry
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Rational ClearQuest(CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability af854a3a-2127-422b-91ae-364da2661108 support.citrix.com Third Party Advisory
HP Release Control TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM notice: The page you requested cannot be displayed af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
IBM Support af854a3a-2127-422b-91ae-364da2661108 www-947.ibm.com Third Party Advisory
Debian -- Security Information -- DSA-3339-1 openjdk-6 af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
'[security bulletin] HPSBGN03405 rev.1 - HP Integration Adaptor, Remote Unauthorized Modification, Di' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 af854a3a-2127-422b-91ae-364da2661108 lists.apple.com Mailing List, Third Party Advisory
Oracle Critical Patch Update - July 2016 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Patch, Third Party Advisory
[security-announce] SUSE-SU-2015:1177-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
[security-announce] SUSE-SU-2015:1449-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM Infosphere Optim Query Workload Tuner for DB2 TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1319-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
CVE-2015-4000 af854a3a-2127-422b-91ae-364da2661108 www.suse.com Third Party Advisory
IBM Flex System Manager SMIA Configuration Tool TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM InfoSphere Guardium TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1320-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
CVE-2015-4000 - Logjam TLS Vulnerability | Puppet af854a3a-2127-422b-91ae-364da2661108 puppet.com Third Party Advisory
NSS accepts export-length DHE keys with regular DHE cipher suites — Mozilla af854a3a-2127-422b-91ae-364da2661108 www.mozilla.org Third Party Advisory
IBM Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2015-1788, CVE-2015-1791, CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
[security-announce] openSUSE-SU-2015:1277-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM Rational ClearQuest TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc af854a3a-2127-422b-91ae-364da2661108 ftp.netbsd.org Mailing List, Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20566.www2.hpe.com Third Party Advisory
IBM License Metric Tool TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Tivoli Storage Manager FastBack for Workstations (CVE-2015-4000) af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM DB2 TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
HPE 支援文件 - HPE 支援中心 af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware af854a3a-2127-422b-91ae-364da2661108 support.citrix.com Third Party Advisory
Oracle Solaris Bulletin - January 2016 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
Oracle Critical Patch Update - January 2016 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
McAfee KnowledgeBase - Intel Security - Security Bulletin: Seven OpenSSL CVEs Announced on June 11, 2015 af854a3a-2127-422b-91ae-364da2661108 kc.mcafee.com Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects multiple IBM Rational products based on IBM Jazz technology (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
openssl.org/news/secadv/20150611.txt af854a3a-2127-422b-91ae-364da2661108 openssl.org Vendor Advisory
Oracle Solaris Third Party Bulletin - July 2015 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Third Party Advisory
About the security content of iOS 8.4 - Apple Support af854a3a-2127-422b-91ae-364da2661108 support.apple.com Third Party Advisory
USN-2706-1: OpenJDK 6 vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
USN-2673-1: Thunderbird vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 support.hpe.com Third Party Advisory
HP Operations Manager for Linux and UNIX TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
openSUSE-SU-2016:0483-1: moderate: Security update for socat af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-2056.html af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Cognos Metrics Manager (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Oracle Critical Patch Update Advisory - April 2016 af854a3a-2127-422b-91ae-364da2661108 www.oracle.com Patch, Third Party Advisory
Mozilla Firefox Multiple Flaws Let Remote Users Execute Arbitrary Code, Obtain Potentially Sensitive Information, Bypass Security Restrictions, and Gain Elevated Privileges - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Cognos Mobile app on Android (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
'[security bulletin] HPSBMU03356 rev.1 - HP Business Service Automation Essentials (BSAE) running TLS' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Juniper Networks - 2016-04 Security Bulletin: Junos Space: Multiple privilege escalation vulnerabilities in Junos Space (CVE-2016-1265) - Knowledge Base af854a3a-2127-422b-91ae-364da2661108 kb.juniper.net Third Party Advisory
'[security bulletin] HPSBGN03533 rev.1 - HP Enterprise Cloud Service Automation and Codar, Remote Una' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
IBM WebSphere Application Server Community Edition TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20566.www2.hpe.com Third Party Advisory
OpenSSL TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
openSUSE-SU-2016:0478-1: moderate: Security update for socat af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20566.www2.hpe.com Third Party Advisory
IBM Rational Rhapsody Design Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Document Display | HPE Support Center af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hpe.com Third Party Advisory
[SECURITY] Fedora 22 Update: nss-3.19.1-1.0.fc22 af854a3a-2127-422b-91ae-364da2661108 lists.fedoraproject.org Mailing List, Third Party Advisory
[security-announce] openSUSE-SU-2016:0261-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
HP integrated Lights Out (iLO) TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
1138554 – (CVE-2015-4000) NSS accepts export-length DHE keys with regular DHE cipher suites ("Logjam") af854a3a-2127-422b-91ae-364da2661108 bugzilla.mozilla.org Issue Tracking, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Content Manager Enterprise Edition (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
'[security bulletin] HPSBGN03407 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Modif' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
[security-announce] openSUSE-SU-2016:0226-1: important: Security update af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
Logjam, FREAK and Upcoming Changes in OpenSSL - OpenSSL Blog af854a3a-2127-422b-91ae-364da2661108 www.openssl.org Vendor Advisory
Logjam: the latest TLS vulnerability explained af854a3a-2127-422b-91ae-364da2661108 blog.cloudflare.com Third Party Advisory
'[security bulletin] HPSBMU03401 rev.1 - HP Operations Manager for UNIX and Linux, Remote Unauthorize' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM WebSphere MQIPT TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201603-11) — Gentoo Security af854a3a-2127-422b-91ae-364da2661108 security.gentoo.org Third Party Advisory
HP IceWall TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1581-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
openSUSE-SU-2015:1209-1: moderate: Security update for mysql-community-s af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM WebSphere Real Time TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1182-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf af854a3a-2127-422b-91ae-364da2661108 cert-portal.siemens.com Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
USN-2696-1: OpenJDK 7 vulnerabilities | Ubuntu af854a3a-2127-422b-91ae-364da2661108 www.ubuntu.com Third Party Advisory
NSS 3.19.1 release notes - Mozilla | MDN af854a3a-2127-422b-91ae-364da2661108 developer.mozilla.org Third Party Advisory
[security-announce] SUSE-SU-2015:1143-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM Rational Software Architect Design Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM Cognos Metrics Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
IBM AIX Sendmail TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1268-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
IBM The Diffie-Hellman vulnerability known as Logjam in Apache Tomcat may affect IBM WebSphere Application Server Community Edition (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
Official HP® Support af854a3a-2127-422b-91ae-364da2661108 h20564.www2.hp.com Third Party Advisory
About the security content of OS X Yosemite v10.10.4 and Security Update 2015-005 - Apple Support af854a3a-2127-422b-91ae-364da2661108 support.apple.com Third Party Advisory
[security-announce] SUSE-SU-2016:0262-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
'[security bulletin] HPSBGN03351 rev.1 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent ru' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Tivoli Composite Application Manager for Transactions (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-304.ibm.com Third Party Advisory
aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc af854a3a-2127-422b-91ae-364da2661108 aix.software.ibm.com Third Party Advisory
2015-05 Out of Cycle Security Bulletin: "Logjam" passive attack on sub-1024 DH groups, and active downgrade attack of TLS to DHE_EXPORT (CVE-2015-4000) - Juniper Networks af854a3a-2127-422b-91ae-364da2661108 kb.juniper.net Third Party Advisory
[security-announce] SUSE-SU-2015:1663-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
'[security bulletin] HPSBUX03363 rev.1 - HP-UX Apache Web Server running OpenSSL, Remote Disclosure o' - MARC af854a3a-2127-422b-91ae-364da2661108 marc.info Mailing List, Third Party Advisory
Mozilla Network Security Service (NSS): Multiple vulnerabilities (GLSA 201701-46) — Gentoo security af854a3a-2127-422b-91ae-364da2661108 security.gentoo.org Third Party Advisory
Oracle July 2016 Critical Patch Update Multiple Vulnerabilities af854a3a-2127-422b-91ae-364da2661108 www.securityfocus.com Third Party Advisory, VDB Entry
HP Performance Manager TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
Debian -- Security Information -- DSA-3300-1 iceweasel af854a3a-2127-422b-91ae-364da2661108 www.debian.org Third Party Advisory
IBM Security Bulletin: Vulnerability in Diffie-Helman ciphers affects IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
IBM Security Bulletin:Vulnerability in Diffie-Hellman ciphers affects Rational Build Forge (CVE-2015-4000) - United States af854a3a-2127-422b-91ae-364da2661108 www-01.ibm.com Third Party Advisory
[security-announce] openSUSE-SU-2015:1266-1: important: Mozilla (Firefox af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
Red Hat Customer Portal af854a3a-2127-422b-91ae-364da2661108 rhn.redhat.com Third Party Advisory
[security-announce] SUSE-SU-2015:1184-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
HP Project and Portfolio Management Center TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
Mozilla Products: Multiple vulnerabilities (GLSA 201512-10) — Gentoo Security af854a3a-2127-422b-91ae-364da2661108 security.gentoo.org Third Party Advisory
APPLE-SA-2015-06-30-1 iOS 8.4 af854a3a-2127-422b-91ae-364da2661108 lists.apple.com Mailing List, Third Party Advisory
Apple OS X TLS Diffie-Hellman Export Cipher Downgrade Attack Lets Remote Users Decrypt Connections - SecurityTracker af854a3a-2127-422b-91ae-364da2661108 www.securitytracker.com Third Party Advisory, VDB Entry
[security-announce] SUSE-SU-2015:1150-1: important: Security update for af854a3a-2127-422b-91ae-364da2661108 lists.opensuse.org Mailing List, Third Party Advisory
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 390226 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2021-0011)
  • 390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
  • 591280 Siemens SCALANCE X-200RNA Switch Devices Denial of Service (DoS) Multiple Vulnerabilities (ICSA-22-349-21, SSA-412672)
  • 671073 EulerOS Security Update for Open Secure Sockets Layer098e (OpenSSL098e) (EulerOS-SA-2019-2643)
  • 671109 EulerOS Security Update for Open Secure Sockets Layer098e (OpenSSL098e) (EulerOS-SA-2019-2509)
  • 710518 Gentoo Linux Mozilla Network Security Service (NSS) Multiple Vulnerabilities (GLSA 201701-46)
  • 753736 SUSE Enterprise Linux Security Update for nrpe (SUSE-SU-2023:0586-1)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report