Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2015-2077

Published: 24/02/2015 Updated: 31/12/2016
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Redirector Sdk

Vulnerability Summary

The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom Security, Inc. StaffCop 5.8, and other products, uses the same X.509 certificate private key for a root CA certificate across different customers' installations, which makes it easier for man-in-the-middle malicious users to spoof SSL servers by leveraging knowledge of this key, as originally reported for Superfish VisualDiscovery on certain Lenovo Notebook laptop products.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

komodia redirector sdk -

References

CWE-200http://www.kb.cert.org/vuls/id/529496http://www.theguardian.com/technology/2015/feb/19/lenovo-accused-compromising-user-security-installing-adware-pcs-superfishhttp://blog.erratasec.com/2015/02/some-notes-on-superfish.html#.VOq6Yvn8Fp4http://marcrogers.org/2015/02/19/lenovo-installs-adware-on-customer-laptops-and-compromises-all-ssl/http://www.wired.com/2015/02/lenovo-superfish/http://support.lenovo.com/us/en/product_security/superfishhttps://blog.filippo.io/komodia-superfish-ssl-validation-is-broken/http://www.us-cert.gov/cas/techalerts/TA15-051A.htmlhttp://news.lenovo.com/article_display.cfm?article_id=1929http://blog.erratasec.com/2015/02/extracting-superfish-certificate.html#.VOq6Yfn8Fp4https://www.facebook.com/notes/protect-the-graph/windows-ssl-interception-gone-wild/1570074729899339http://www.securitytracker.com/id/1031779http://www.securityfocus.com/bid/72693https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook