Vulnetix
Try Vulnetix Request Demo
CVE-2011-5095 PUBLISHED CVSS 4 MEDIUM

The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.

EPSS 0.32% · 54.6th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
0.32%
54.6th percentile

Affected Products

VendorProductVersions
opensslopenssl0.9.8
n/an/an/a

Timeline

References

Open in Interactive Console →