Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2015-2808
HistoryApr 01, 2015 - 12:00 a.m.

CVE-2015-2808

2015-04-0100:00:00
mitre
www.cve.org

4.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the “Bar Mitzvah” issue.

References

Related

ibm 173
nessus 12
f5 2
ubuntucve 1
aix 1
prion 1
nvd 1
cve 1
debiancve 1
veracode 1
huawei 1
openvas 3
checkpoint_advisories 1
ibm
ibm
Security Bulletin: Vulnerability in RC4 stream cipher affects InfoSphere BigInsights (CVE-2015-2808)
2021-04-08 20:59:42
Security Bulletin: A vulnerability in RC4 stream cipher affects IBM FlashSystem 900 (CVE-2015-2808)
2019-01-03 20:55:01
Security Bulletin: Vulnerability in RC4 stream cipher affects IBM InfoSphere Optim Performance Manager (CVE-2015-2808)
2021-07-08 21:30:52
nessus
nessus
IBM HTTP Server SSL/TLS RC4 Stream Cipher Key Invariance (Bar Mitzvah)
2015-12-21 00:00:00
AIX 7.1 TL 3 : bos.net.tcp.server (U867669) (Bar Mitzvah)
2016-02-29 00:00:00
IBM HTTP Server 8.5.0.0 <= 8.5.5.5 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.37 Information Disclosure (260001)
2020-12-16 00:00:00
f5
f5
SOL16864 - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-07-08 00:00:00
K16864 : SSL/TLS RC4 vulnerability CVE-2015-2808
2015-08-17 00:00:00
ubuntucve
ubuntucve
CVE-2015-2808
2015-03-31 00:00:00
aix
aix
Vulnerability in RC4 stream cipher affects AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on VIOS
2015-04-27 15:27:04
prion
prion
Design/Logic Flaw
2015-04-01 02:00:00
nvd
nvd
CVE-2015-2808
2015-04-01 02:00:35
cve
cve
CVE-2015-2808
2015-04-01 02:00:35
debiancve
debiancve
CVE-2015-2808
2015-04-01 02:00:35
veracode
veracode
Information Disclosure
2019-05-02 05:39:15
huawei
huawei
Security Advisory - Bar Mitzvah Attack Vulnerability in Huawei Products
2015-09-19 00:00:00
openvas
openvas
F5 BIG-IP - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-09-18 00:00:00
HPE Network Products Multiple Remote Vulnerabilities
2016-11-25 00:00:00
SSL/TLS: Report Weak Cipher Suites
2012-03-01 00:00:00
checkpoint_advisories
checkpoint_advisories
Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)
2015-05-17 00:00:00

4.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.6%

JSON
Related for CVELIST:CVE-2015-2808
ibm173nessus12f52ubuntucve1aix1prion1nvd1cve1debiancve1veracode1huawei1openvas3checkpoint_advisories1