Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-8960: NetApp software could let attackers spoof TLS servers

CVE-2015-8960 · published 10 years ago

Summary

Several NetApp products that use TLS may allow a man‑in‑the‑middle attacker to pretend to be a legitimate server if they obtain a client’s digital certificate. This occurs because the protocol can be tricked into creating a shared secret without needing the server’s private key. Apply the latest security updates from NetApp and ensure all TLS configurations are kept current to block this impersonation risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
netapp	host_agent	All versions `cpe:2.3:a:netapp:host_agent:-:::::::*`
ietf	transport_layer_security	<= 1.2 `cpe:2.3:a:ietf:transport_layer_security::::::::`
netapp	clustered_data_ontap_antivirus_connector	All versions `cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:::::::*`
netapp	data_ontap_edge	All versions `cpe:2.3:a:netapp:data_ontap_edge:-:::::::*`
netapp	oncommand_shift	All versions `cpe:2.3:a:netapp:oncommand_shift:-:::::::*`
netapp	plug-in_for_symantec_netbackup	All versions `cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:::::::*`
netapp	smi-s_provider	All versions `cpe:2.3:a:netapp:smi-s_provider:-:::::::*`
netapp	snap_creator_framework	All versions `cpe:2.3:a:netapp:snap_creator_framework:-:::::::*`
netapp	snapdrive	All versions `cpe:2.3:a:netapp:snapdrive:-:::::unix::`
netapp	snapmanager	All versions `cpe:2.3:a:netapp:snapmanager:-:::::oracle::`
netapp	snapprotect	All versions `cpe:2.3:a:netapp:snapprotect:-:::::::*`
netapp	solidfire_\&_hci_management_node	All versions `cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::*`
netapp	system_setup	All versions `cpe:2.3:a:netapp:system_setup:-:::::::*`

Original advisory text

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

References

http://twitter.com/matthew_d_green/statuses/630908726950674433 Press/Media Coverage Technical Description Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4 Mailing List Technical Description Third Party Advisory
http://www.securityfocus.com/bid/93071 Broken Link Third Party Advisory VDB Entry
https://kcitls.org Exploit Technical Description
https://security.netapp.com/advisory/ntap-20180626-0002/ Third Party Advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf Exploit Mitigation Technical Description

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

8.1 High

Exploitation

2% chance of attack within 30 days

Type

CWE-295Improper Certificate Validation

Timeline

Published21 Sep 2016

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2015-8960 · NVD

Track software like this

Free during beta