Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.7
CVSSv3

CVE-2015-4000

Published: 21/05/2015 Updated: 09/02/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 3.7 | Impact Score: 1.4 | Exploitability Score: 2.2
VMScore: 463
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Openssl

Vulnerability Summary

The TLS protocol 1.2 and previous versions, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle malicious users to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openssl openssl

canonical ubuntu linux 12.04

canonical ubuntu linux 14.10

canonical ubuntu linux 14.04

canonical ubuntu linux 15.04

hp hp-ux b.11.31

ibm content manager 8.5

oracle jrockit r28.3.6

debian debian linux 8.0

debian debian linux 7.0

oracle jdk 1.8.0

oracle jre 1.7.0

oracle jre 1.6.0

oracle jre 1.8.0

oracle jdk 1.7.0

oracle jdk 1.6.0

suse linux enterprise server 11.0

suse linux enterprise software development kit 12

suse linux enterprise desktop 12

suse suse linux enterprise server 12

apple mac os x

apple iphone os

mozilla network security services 3.19

oracle sparc-opl service processor

opera opera browser -

microsoft internet explorer -

google chrome -

mozilla firefox -

apple safari -

mozilla firefox esr 38.1.0

mozilla seamonkey 2.35

mozilla thunderbird 38.1

mozilla thunderbird 31.8

mozilla firefox os 2.2

mozilla firefox 39.0

mozilla firefox esr 31.8

Vendor Advisories

IBM: Security Bulletin: IBM Spectrum Protect Plus vulnerable to Logjam (CVE-2015-4000)
A port used by VADP is reported to be vulnerable to Logjam (CVE-2015-4000) ...
IBM: IBM Security Bulletin: Spectrum Protect Operations Center vulnerable to Logjam (CVE-2015-4000)
A port used by Operations Center is reported to be vulnerable to Logjam (CVE-2015-4000) ...
IBM: Security Bulletin: IBM Spectrum Protect Snapshot for VMware is vulnerable to Logjam (CVE-2015-4000)
IBM Spectrum Protect Snapshot for VMware is vulnerable to Logjam (CVE-2015-4000) ...
IBM: Security Bulletin: IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments are vulnerabile to Logjam (CVE-2015-4000)
IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrurm Protect for Space Management, and IBM Spectrum Protect for Virtual Environments are vulnerable to Logjam (CVE-2015-4000) ...
Mozilla: NSS accepts export-length DHE keys with regular DHE cipher suites
Mozilla Foundation Security Advisory 2015-70 NSS accepts export-length DHE keys with regular DHE cipher suites Announced July 2, 2015 Reporter Matthew Green, authors of the paper Impact Moderate Products Firefox, Firefox ESR ...
Mozilla: Mozilla Foundation Security Advisory 2015-70
NSS accepts export-length DHE keys with regular DHE cipher suites Announced July 2, 2015 Reporter Matthew Green, authors of the paper Impact Moderate Products Firefox, Firefox ESR, Firefox OS, SeaMonkey ...
Amazon Linux AMI: ALAS-2015-569
A flaw was found in the way the TLS protocol composes the Diffie-Hellman (DH) key exchange A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic (CVE-2015-4000) Please note that this update forces the TLS/SSL client implementation in NSS to ...
Citrix Security Bulletins: CVE-2015-4000 - Citrix Security Advisory for DHE_EXPORT TLS Vulnerability
Overview A TLS protocol vulnerability has been recently disclosed that could result in attackers being able to intercept and modify SSL/TLS encrypted traffic to servers that support Diffie-Hellman based export cipher suites  This vulnerability is known as 'LogJam' and has been assigned the following CVE number: CVE-2015-4000: cvemitre ...
Ubuntu Security Notice: thunderbird vulnerabilities
Several security issues were fixed in Thunderbird ...
Debian Security Advisories: DSA-3688-1 nss -- security update
Several vulnerabilities were discovered in NSS, the cryptography library developed by the Mozilla project CVE-2015-4000 David Adrian et al reported that it may be feasible to attack Diffie-Hellman-based cipher suites in certain circumstances, compromising the confidentiality and integrity of data encrypted with Transport Layer Se ...
Symantec Security Advisories: SA111 : OpenSSL Vulnerabilities 28-Jan-2016
<!-- Start - Changes for Security Advisory Channel --> Security Advisory ID SYMSA1347 Initial Publication Date: Advisory Status: Advisory Severity: CVSS Base Score: Legacy ID 18 Feb 2016 Open Medium CVSS v2: 58 SA1 ...
Amazon Linux AMI: ALAS-2015-550
LOGJAM: A flaw was found in the way the TLS protocol composes the Diffie-Hellman exchange (for both export and non-export grade cipher suites) An attacker could use this flaw to downgrade a DHE connection to use export-grade key sizes, which could then be broken by sufficient pre-computation This can lead to a passive man-in-the-middle attack in ...
Ubuntu Security Notice: openjdk-7 vulnerabilities
Several security issues were fixed in OpenJDK 7 ...
Ubuntu Security Notice: openjdk-6 vulnerabilities
Several security issues were fixed in OpenJDK 6 ...
Debian Security Advisories: DSA-3300-1 iceweasel -- security update
Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service This update also addresses a vulnerability in DHE key processing commonly known as the LogJam vul ...
Debian Security Advisories: DSA-3339-1 openjdk-6 -- security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography For the oldstable distribution (wheezy), these problems have been fixed in version 6b36-1138-1~deb7 ...
Ubuntu Security Notice: firefox vulnerabilities
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Ubuntu Security Notice: firefox vulnerabilities
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Amazon Linux AMI: ALAS-2015-586
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733) A flaw was found in the way the Libraries component of OpenJDK ve ...
Amazon Linux AMI: ALAS-2015-570
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733) A flaw was found in the way the Libraries component of OpenJDK ve ...
Amazon Linux AMI: ALAS-2015-571
Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733) A flaw was found in the way the Libraries component of OpenJDK ve ...
Symantec Security Advisories: SA98 : OpenSSL Security Advisory 11-June-2015
<!-- Start - Changes for Security Advisory Channel --> Security Advisory ID SYMSA1325 Initial Publication Date: Advisory Status: Advisory Severity: CVSS Base Score: Legacy ID 17 Jun 2015 Open High CVSS v2: 75 SA98 ...
Debian Security Advisories: DSA-3316-1 openjdk-7 -- security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography For the oldstable distribution (wheezy), these problems have been fixed in version 7u79-256-1~deb7u ...
Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2015
<!-- content goes here --> Oracle Solaris Third Party Bulletin - July 2015 Description The Oracle Solaris Third Party Bulletin announces patches for one or more security vulnerabilities fixed in third party software that is included in Oracle Solaris distributions Starting January 20, 2015, Third Party Bulletins are released on the same day when ...
Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - January 2016
Oracle Solaris Third Party Bulletin - January 2016 Description The Oracle Solaris Third Party Bulletin announces patches for one or more security vulnerabilities fixed in third party software that is included in Oracle Solaris distributions Starting January 20, 2015, Third Party Bulletins are released on the same day when Oracle Critical Patch Up ...
Citrix Security Bulletins: Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware
Description of Problem A number of security vulnerabilities have been identified in firmware used in the Lights Out Management (LOM) component across all NetScaler-based hardware appliances: Citrix NetScaler Application Delivery Controller (ADC) Citrix NetScaler Gateway Citrix NetScaler Service Delivery Appliance Citrix CloudBridge (now NetScaler S ...
Oracle: Oracle Critical Patch Update Advisory - October 2015
Oracle Critical Patch Update Advisory - October 2015 Description A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory Thus, prior Critical Patc ...

ICS Advisories

Siemens SCALANCE X-200RNA Switch Devices

Nmap Scripts

ssl-dh-params

Weak ephemeral Diffie-Hellman parameter detection for SSL/TLS services.

nmap --script ssl-dh-params <target>

Host script results:
| ssl-dh-params:
|   VULNERABLE:
|   Transport Layer Security (TLS) Protocol DHE_EXPORT Ciphers Downgrade MitM (Logjam)
|     State: VULNERABLE
|     IDs:  OSVDB:122331  CVE:CVE-2015-4000
|       The Transport Layer Security (TLS) protocol contains a flaw that is triggered
|       when handling Diffie-Hellman key exchanges defined with the DHE_EXPORT cipher.
|       This may allow a man-in-the-middle attacker to downgrade the security of a TLS
|       session to 512-bit export-grade cryptography, which is significantly weaker,
|       allowing the attacker to more easily break the encryption and monitor or tamper
|       with the encrypted stream.
|     Disclosure date: 2015-5-19
|     Check results:
|       EXPORT-GRADE DH GROUP 1
|         Ciphersuite: TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
|         Modulus Type: Non-safe prime
|         Modulus Source: sun.security.provider/512-bit DSA group with 160-bit prime order subgroup
|         Modulus Length: 512 bits
|         Generator Length: 512 bits
|         Public Key Length: 512 bits
|     References:
|       https://weakdh.org
|       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000
|       http://osvdb.org/122331
|
|   Diffie-Hellman Key Exchange Insufficient Diffie-Hellman Group Strength
|     State: VULNERABLE
|       Transport Layer Security (TLS) services that use Diffie-Hellman groups of
|       insuffficient strength, especially those using one of a few commonly shared
|       groups, may be susceptible to passive eavesdropping attacks.
|     Check results:
|       WEAK DH GROUP 1
|         Ciphersuite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
|         Modulus Type: Safe prime
|         Modulus Source: Unknown/Custom-generated
|         Modulus Length: 512 bits
|         Generator Length: 8 bits
|         Public Key Length: 512 bits
|     References:
|       https://weakdh.org
|
|   Diffie-Hellman Key Exchange Potentially Unsafe Group Parameters
|     State: VULNERABLE
|       This TLS service appears to be using a modulus that is not a safe prime and does
|       not correspond to any well-known DSA group for Diffie-Hellman key exchange.
|       These parameters MAY be secure if:
|       - They were generated according to the procedure described in FIPS 186-4 for
|         DSA Domain Parameter Generation, or
|       - The generator g generates a subgroup of large prime order
|       Additional testing may be required to verify the security of these parameters.
|     Check results:
|       NON-SAFE DH GROUP 1
|         Cipher Suite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
|         Modulus Type: Non-safe prime
|         Modulus Source: Unknown/Custom-generated
|         Modulus Length: 1024 bits
|         Generator Length: 1024 bits
|         Public Key Length: 1024 bits
|     References:
|       https://weakdh.org
|_      http://www2.esentire.com/TLSUnjammedWP

Github Repositories

nmap-esentire

eSentire additions to the nmap network scanner

Weak ephemeral Diffie-Hellman parameter detection for SSL/TLS services This script simulates SSL/TLS handshakes using ciphersuites that have ephemeral Diffie-Hellman as the key exchange algorithm Diffie-Hellman MODP group parameters are extracted and analyzed for vulnerability to Logjam (CVE 2015-4000) and other weaknesses Opportunistic STARTTLS sessions are established on s

HAProxy-Keepalived-Sec-HighLoads

HAProxy ve Keepalived (LoadBalancer+Cluster+Sec+HighLoads) Kurulum ve Yapılandırması HAProxy, yüksek erişilebilirliğe(high availability) sahip yük dengeleyici(load balancing) ile TCP ve HTTP tabanlı uygulamalar için proxy sunucusu hizmeti veren açık kaynak kodlu bir yazılımdır Keepalived, IP failover(yük devretme) yeteneğini ikiden da

stuff

My(A) curated list of goodies.

All sorts of stuff My(A) curated list of goodies The stuff you are actually looking for: Table of contents Bookmarks Books Browsers CAPTCHA Chat Color CMS CSS Digests Donations Email Fonts GIT Icons JavaScript Lessons Localization PHP Regular expressions RESTful API Russian spelling QR Codes Security SEO Social Testing Text editors Textures, patterns, backgrounds Utils Vi

CVE-2015-4000 The TLS protocol 12 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the &q

Shodan-Browser

Shodan-Browser Python script to search queries on Shodan It gives a detailed inform of each result in the search, including vulnerabilities and exploits Example IP: 375816759 Producto: Jetty/318 (Windows 2000 50 x86) Sistema Operativo: None Organizacion: ADISTA SAS Ubicacion: Vesoul, 614251/4762604, France Puertos abiertos: 443 Vulnerabilidades: CVE-2005-3747 CVE-2

NATANICCO PAGES CONTAINS LINKS,REFERENCE'S ,HOW-TO'S,ONE LINERS, A LITTLE BIT OF EVERYTHING SOME NOTES I PUT TOGETHER Natanic_pentest_ethical Zip containing 12 seperate pdf files for denian manuals Understanding_networks Understanding confidentiality availability Understanding Virtual and cloud TREE STRUCTURE OF THIS PAGE THESE LINKS BELOW ARE GUIDES,REFS,HOW-T

python-ssl-deprecated

python-ssl-deprecated python recompiled with vulnerable OpenSSL including weak protocols and weak ciphers enabled (including GOST) This is for testing and legal PT only OpenSSL code base: 102u Vulnurabilities backported from previous releases of OpenSSL: Heartbleed (CVE-2014-0160) CCS (CVE-2014-0224) SWEET32 (CVE-2016-2183) CRIME, TLS (CVE-2012-4929) LOGJAM (CVE-2015-4000)

Network-Security-2021

Network Security 2021 Progetto per l'esame di Network Security AA 2021-2022 Gruppo Pisano-Poziello-Ruggiero Il framework Metasploit e applicazioni Il Metasploit Project è un progetto di sicurezza informatica che si propone di offrire informazioni circa le vulnerabilità di sicurezza e di aiutare nel penetration testing Il sottoprogetto Metasploit Framework,

script_a2sv

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN B Dev Plan -

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN

a2sv

Auto Scanning to SSL Vulnerability

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN B Dev Plan -

a2sv

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN B Dev Plan -

a2sv

Escaneo automático a vulnerabilidad de SSL HeartBleed, CCS Injection, SSLv3 POODLE, FREAK

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN B Dev Plan -

sslscanner

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SDPY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN B Dev Plan [PLAN

a2sv

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SDPY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN B Dev Plan [PLAN

a2sv

1 A2SV? Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc A Support Vulnerability - CVE-2007-1858] Anonymous Cipher - CVE-2012-4929] CRIME(SPDY) - CVE-2014-0160] CCS Injection - CVE-2014-0224] HeartBleed - CVE-2014-3566] SSLv3 POODLE - CVE-2015-0204] FREAK Attack - CVE-2015-4000] LOGJAM Attack - CVE-2016-0800] SSLv2 DROWN

HTTPSScan

Shell script for testing the SSL/TLS Protocols

HTTPSScan Shell script for testing the SSL/TLS Protocols Check for SSL/TLS Vulnerabilities: SSLv2 (CVE-2011-1473) (CVE-2016-0800) TLS CRIME (CVE-2012-4929) RC4 (CVE-2013-2566) Heartbleed (CVE-2014-0160) Poodle (CVE-2014-3566) FREAK (CVE-2015-0204) Logjam (CVE-2015-4000) Weak Ciphers Cygwin dependencies: ncurses Usage: bash httpsscansh [target] [port] [option] Options: all,

A2SV--SSL-VUL-Scan

A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 D…

A2SV--SSL-VUL-Scan A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-2012-4929] CRIME(SPDY) [CVE-2014-0160] CCS Injection [CVE-2014-0224] HeartBleed [CVE-2014-3566] SSLv3 POODLE [CVE-2015-0204] FREAK Attack [CVE-2015-4000] LOGJAM Attack [CVE-2016-0800] SSLv2 DROWN Installat

Deep Security and Workload Security with Ansible Objective Deploy DSA Module Demos Support Contribute Objective This repo does contain some Ansible playbooks and modules to ease handling Deep- or Workload Security with the use of Ansible Note: Take these playbooks and scripts as proofs-of-concept, not to be used in production Adapt them to your needs, eg integrate app

devops-netology

1Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2Установите Google authenticator на мобильный телефон Настройте вход в Bitwarden акаунт через Google authenticator OTP 3Установите apache2, сген

Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Ответ: Сделал ##2 Установите Google auth

devops-netology

1) 2) 3) 4)Клонируем репозиторий testssl: git clone --depth 1 githubcom/drwetter/testsslshgit Задаем права запуска на файл testsslsh: vagrant@vagrant:~/testsslsh$ chmod +x /testsslsh Проверяем произвольный сайт на у

devops-netology

Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей ![image](user-imagesgithubusercontentcom/87232557/134864125-e91e71c3-0d31-4030-8983-ff94d978f6eepng) 2Установите Google authenticator на мобильны

Репозиторий для домашних заданий по курсу DevOps 92 ДЗ 92 CI\CD, Знакомоство с SonarQube Подготовка к выполнению Выполняем docker pull sonarqube:87-community Выполняем docker run -d --name sonarqube -e SONAR_ES_BOOTSTRAP_CHECKS_DISABLE=true -p 9000:9000 sonarqube:87-community Ждём

sysadmin-09-security

Домашнее задание к занятию "39 Элементы безопасности информационных систем" (1) Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Решение (2) Установите Google authenticator н

Домашнее задание к занятию «Элементы безопасности информационных систем» Установите плагин Bitwarden для браузера Зарегестрируйтесь и сохраните несколько паролей Установите Google Authenticator на мобильный

devops-netology

devops-netology Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2 Установите Google authenticator н

devops-netology

devops-netology Домашнее задание к занятию «21 Системы контроля версий» В будущем благодаря добавленному файлу gitignore в директории Terraform при использовании команды commit внутри директории terraform, будут игнориров

devops-netology

Выполнено Выполнено Устанавливаем apache2, включаем поддержку ssl: sudo apt install apache2 sudo a2enmod ssl sudo systemctl restart apache2 Генерируем самоподписанный сертификат: sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \ -keyout /etc

devops-netology

Task 1 Установите Bitwarden плагин для браузера Зарегистрируйтесь и сохраните несколько паролей Для эксперимента выбираю браузер Firefox Устанавливаю расширение "Bitwarden - free password manager" Далее регистрирую аккаунт

devops-netology

Start 2021-10-13 07:42:02 1042249171:443 (netologyru) Further IP addresses: 1042248171 172674383 2606:4700:10::ac43:2b53 2606:4700:10::6816:30ab 2606:4700:10::6816:31ab rDNS (1042249171): -- Service detected: HTTP Testing vulnerabilities Heartbleed (CVE-2014-0160) not vulnerable (OK), no heartbeat extension CCS (CVE-2014-

Домашнее задание к занятию "39 Элементы безопасности информационных систем" - yakovlev_vs 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Решение Bitwarden плагин устано

bash_1

Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Решение: 2 Установите Google authenticator н

3.9_1

39_1 1,2 Зарегистрировался в BitWarden, подключил Google Authenticator 3 Сгенерировал самоподписанный сертификат, настроил apache2 4 Проверил сайт bioreformedru pashi@pashi-ub2004-test:/etc/apache2/conf-enabled/testsslsh$ /testsslsh -U --sneaky bioreformedru ####################

Домашнее задание к занятию «Элементы безопасности информационных систем» Цель задания В результате выполнения задания вы: настроите парольный менеджер, что позволит не использовать один и тот же пар

devops-netology

Репозиторий для домашних заданий по курсу DevOps 39 ДЗ 39 Элементы безопасности информационных систем Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Ответ: Установите Go

Security

Домашнее задание к занятию "39 Элементы безопасности информационных систем" Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Ответ: Установил, зарегистрировался

3.9

"39 Элементы безопасности информационных систем" 1 Выполнено 2 Выполнено 3 Systemctl status apache2 ● apache2service - The Apache HTTP Server Loaded: loaded (/lib/systemd/system/apache2service; enabled; vendor preset: enabled) Active: active (running) since Mon 2022-03-07 08:17:33 UTC;

devops-netology

devops-netology Hello, World!!! В файле gitignore: - игнорируются все скрытые файлы "terraform" с любой вложенностью - игнорируются все файлы заканчиващиеся на tfstate или содержат в названии tfstate - игнорируется файл crashlog - игн

devops-netology

Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегистрируйтесь и сохраните несколько паролей Решение: Но для себя я уже давно исп

Rep2

11 Введение в DevOps Задание №1 - Подготовка рабочей среды jsonnet md sh tr yaml Задание №2 - Описание жизненного цикла задачи (разработки нового функционала) Менеджер ставит перед разработчиками задачу на разработку

Домашнее задание к занятию "39 Элементы безопасности информационных систем" Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Ответ Установите Google authenticator на мо

devops-netology

Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегистрируйтесь и сохраните несколько паролей 2 Установите Google authenticator на мобиль

devops-netology «24 Инструменты Git» git show aefea commit aefead2207ef7e2aa5dc81a34aedf0cad4c32545 git show 85024d3 tag: v01223 3 git checkout b8d720 git log --pretty=format:'%h %s' –graph 56cd7859e0, 9ea88f22fc git log --oneline v01223v01

devops-netology

DevOps-netology - учебный курс для DevOps инженеров Это публичный репозиторий, созданный для обучения и отработки навыков Если вы DevOps специалист, то полезной информации для вас тут нет Здесь будут опубликованы некото

devops-netology

Плагин поставил, зарегистрировался, создал пару записей: (githubcom/Danil054/devops-netology/blob/main/pics/bitwarden1png) На телефон установил authenticator, в профиле настроил двухфакторную аутентификацию и активировал в приложении

Домашнее задание к занятию "32 Работа в терминале Лекция 2" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Установил, зарегистрировался, добавил тестовый логин

03-sysadmin-09

1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2 Установите Google authenticator на мобильный телефон Настройте вход в Bitwarden акаунт через Google authenticator OTP 3 Установите apache2, сге

Домашнее задание 39 Скриншот установленного плагина Bitwarden с сохраненным паролем находится в файле bitwardenpng Скриншот настроек OTP находится в файле bitwarden-otpjpg Использовалось приложение Яндексключ Создание

devops-netology

devops-netology Домашнее задание к занятию «11 Введение в DevOps» Благодаря добавленному файлу gitignore будут проигнорированы следующие файлы в каталоге terraform: все файлы в директориях и поддиректориях terraform; файлы

39 Элементы безопасности информационных систем Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Успешно зарегистрировался и добавил 3 реквизита аутентификации

DevOpsStudents

DevOpsStudents -Netology -HelloNetology Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1)Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2)Установи

Ответы на задание к занятию "39 Элементы безопасности информационных систем" Настроил проброс портов для ВМ nano Vagrantfile configvmnetwork "forwarded_port", guest: 80, host: 8080, host_ip: "127001" configvmnetwork "forwarded_por

devops-netology

Домашнее задание к занятию «39 Элементы безопасности информационных систем» 1,2 Bitwarden установлен в браузер Chromium, успешно настроена двухфакторная ауткнтификация vag Устанавливаем apache2 и генерируем се

devops-netology

devops-netology Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2Установите Google authenticator н

netology-DevOps

11 Введение в DevOps — Аронов Леонид Задание №2 - Описание жизненного цикла задачи (разработки нового функционала) Формулировка описания нового функционала Продукт-менеджер совместно с клиентом или отдело

devops-netology

Домашнее задание к занятию "39 Элементы безопасности информационных систем" 1 Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей 2 Установите Google authenticator на мобил

netology-DevOps-dz_-14

1 2 3 vagrant Vagrantconfigure("2") do |config| configvmdefine "master" do |subconfig| subconfigvmbox = "bento/ubuntu-2004" subconfigvmhostname = "master" subconfigvmnetwork :private_network, ip: "10001" end configvmdefine "web" do |subconfig| subconfigvmbox = "bento/ubun

devops-netology

32 Работа в терминале, лекция 2 1 Какого типа команда cd? Попробуйте объяснить, почему она именно такого типа; опишите ход своих мыслей, если считаете что она могла бы быть другого типа cd - встроенная команда об

devops-netology

devops-netology Kirill Nelyubov Ответы на задание к занятию "39 Элементы безопасности информационных систем": Выполнено Принт-скрин "Google authenticator"а сделать не получается, доступ запрещён root@vagrant:~/testsslsh# /tests

devops-netology

39 Элементы безопасности информационных систем Установите Bitwarden плагин для браузера Зарегестрируйтесь и сохраните несколько паролей Зарегестрировался и установил ibbco/939DrZ8 У

whitehat nmap -sV --script vuln 192168123162 output Starting Nmap 793 ( nmaporg ) at 2022-12-25 15:11 EST Pre-scan script results: | broadcast-avahi-dos: | Discovered hosts: | 22400251 | After NULL UDP avahi packet DoS (CVE-2011-1002) |_ Hosts are all up (not vulnerable) Nmap scan report for 192168123162 Host is up (000025s latency) Not shown: 97

Github CVE Monitor Automatic monitor github cve using Github Actions Last generated : 2023-07-21 13:57:04700072 CVE Name Description Date CVE-2023-38632 Halcy0nic/CVE-2023-38632 Proof of concept for CVE-2023-38632 2023-07-21T05:03:57Z CVE-2023-38434 Halcy0nic/CVE-2023-38434 Proof of Concept for CVE-2023-38434 2023-07-18T16:09:04Z CVE-2023-38408 snowcra5h/CVE-2023-

Recent Articles

OpenSSL releases seven patches for seven vulns
The Register • Darren Pauli • 12 Jun 2015

Flood of fixes to clear LogJam flaw

Users are being urged to upgrade OpenSSL to prevent eavesdroppers listening to otherwise encrypted connections undermined through the LogJam vulnerability thought to be the NSA's crypto-cracking tool of choice.
OpenSSL maintainers have patched seven vulnerabilities including the LogJam vulnerability (CVE-2015-4000) which allows attackers to trick browsers into considering an insecure encrypted connection as secure.
"A vulnerability in the TLS protocol allows a man-in-the-middle attac...

Read more...
OpenSSL releases seven patches for seven vulns
The Register • Darren Pauli • 12 Jun 2015

Flood of fixes to clear LogJam flaw

Users are being urged to upgrade OpenSSL to prevent eavesdroppers listening to otherwise encrypted connections undermined through the LogJam vulnerability thought to be the NSA's crypto-cracking tool of choice.
OpenSSL maintainers have patched seven vulnerabilities including the LogJam vulnerability (CVE-2015-4000) which allows attackers to trick browsers into considering an insecure encrypted connection as secure.
"A vulnerability in the TLS protocol allows a man-in-the-middle attac...

Read more...
OpenSSL Patches Five Flaws, Adds Protection Against Logjam Attack
Threatpost • Dennis Fisher • 11 Jun 2015

The OpenSSL project has patched several moderate- and low-severity security vulnerabilities and also has added protection against the Logjam attack in new releases of the software.
Most of the vulnerabilities fixed in the new releases are denial-of-service bugs, but one of them can potentially cause memory corruption. That vulnerability only affected older versions of OpenSSL.
“If a DTLS peer receives application data between the ChangeCipherSpec and Finished messages, buffering o...

Read more...

References

CWE-310https://weakdh.org/imperfect-forward-secrecy.pdfhttps://weakdh.org/https://www.suse.com/security/cve/CVE-2015-4000.htmlhttps://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/http://openwall.com/lists/oss-security/2015/05/20/8http://www.securityfocus.com/bid/74733https://www.openssl.org/news/secadv_20150611.txthttp://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlhttp://support.apple.com/kb/HT204941http://support.apple.com/kb/HT204942http://www.mozilla.org/security/announce/2015/mfsa2015-70.htmlhttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_noteshttps://bugzilla.mozilla.org/show_bug.cgi?id=1138554http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlhttp://www.securitytracker.com/id/1033064http://www-01.ibm.com/support/docview.wss?uid=swg21962455http://www.debian.org/security/2015/dsa-3324http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.htmlhttp://www.ubuntu.com/usn/USN-2673-1http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.htmlhttp://marc.info/?l=bugtraq&m=143880121627664&w=2http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlhttp://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htmhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722http://www.securityfocus.com/bid/91787https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763http://marc.info/?l=bugtraq&m=145409266329539&w=2https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527http://marc.info/?l=bugtraq&m=144060576831314&w=2http://marc.info/?l=bugtraq&m=144069189622016&w=2http://marc.info/?l=bugtraq&m=144493176821532&w=2http://marc.info/?l=bugtraq&m=143637549705650&w=2http://marc.info/?l=bugtraq&m=144061542602287&w=2http://marc.info/?l=bugtraq&m=143557934009303&w=2http://marc.info/?l=bugtraq&m=143628304012255&w=2http://marc.info/?l=bugtraq&m=144104533800819&w=2http://marc.info/?l=bugtraq&m=144060606031437&w=2http://marc.info/?l=bugtraq&m=143558092609708&w=2http://marc.info/?l=bugtraq&m=143655800220052&w=2http://marc.info/?l=bugtraq&m=143506486712441&w=2http://marc.info/?l=bugtraq&m=144102017024820&w=2http://marc.info/?l=bugtraq&m=144043644216842&w=2http://marc.info/?l=bugtraq&m=144050121701297&w=2http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlhttp://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgeryhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727https://openssl.org/news/secadv/20150611.txthttps://security.gentoo.org/glsa/201603-11http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.htmlhttp://www.securitytracker.com/id/1034884http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.htmlhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929http://www-304.ibm.com/support/docview.wss?uid=swg21967893https://security.gentoo.org/glsa/201512-10http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.htmlhttp://www.securitytracker.com/id/1034728http://www.securitytracker.com/id/1034087http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.htmlhttp://www.securitytracker.com/id/1033991https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.htmlhttp://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.htmlhttp://www-304.ibm.com/support/docview.wss?uid=swg21960041https://bto.bluecoat.com/security-advisory/sa98http://www.securitytracker.com/id/1033760http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.htmlhttps://security.gentoo.org/glsa/201506-02https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140http://www-01.ibm.com/support/docview.wss?uid=swg21959111http://www.securitytracker.com/id/1033513http://www.securitytracker.com/id/1033433http://www.securitytracker.com/id/1033430http://www.securitytracker.com/id/1033416http://www.securitytracker.com/id/1033385http://www.fortiguard.com/advisory/2015-05-20-logjam-attackhttp://support.citrix.com/article/CTX201114http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.htmlhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241http://www-304.ibm.com/support/docview.wss?uid=swg21962816http://www-01.ibm.com/support/docview.wss?uid=swg21962739http://www-01.ibm.com/support/docview.wss?uid=swg21960191http://www.ubuntu.com/usn/USN-2706-1http://www.ubuntu.com/usn/USN-2696-1http://www.securitytracker.com/id/1033891http://www.securitytracker.com/id/1033341http://www.securitytracker.com/id/1033222http://www.securitytracker.com/id/1033210http://www.securitytracker.com/id/1033209http://www.securitytracker.com/id/1033208http://www.debian.org/security/2015/dsa-3339http://rhn.redhat.com/errata/RHSA-2015-1526.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.htmlhttp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.aschttp://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.aschttps://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403https://www-304.ibm.com/support/docview.wss?uid=swg21959745https://kc.mcafee.com/corporate/index?page=content&id=SB10122http://www-304.ibm.com/support/docview.wss?uid=swg21960418http://www-304.ibm.com/support/docview.wss?uid=swg21960380http://www-304.ibm.com/support/docview.wss?uid=swg21960194http://www-304.ibm.com/support/docview.wss?uid=swg21959132http://www-304.ibm.com/support/docview.wss?uid=swg21958984http://www-01.ibm.com/support/docview.wss?uid=swg21961717http://www-01.ibm.com/support/docview.wss?uid=swg21959812http://www-01.ibm.com/support/docview.wss?uid=swg21959636http://www-01.ibm.com/support/docview.wss?uid=swg21959539http://www-01.ibm.com/support/docview.wss?uid=swg21959530http://www-01.ibm.com/support/docview.wss?uid=swg21959517http://www-01.ibm.com/support/docview.wss?uid=swg21959481http://www-01.ibm.com/support/docview.wss?uid=swg21959453http://www-01.ibm.com/support/docview.wss?uid=swg21959325http://www-01.ibm.com/support/docview.wss?uid=swg21959195http://www.ubuntu.com/usn/USN-2656-2http://www.ubuntu.com/usn/USN-2656-1http://www.securitytracker.com/id/1032884http://www.securitytracker.com/id/1032871http://www.securitytracker.com/id/1032865http://www.securitytracker.com/id/1032864http://www.securitytracker.com/id/1032856http://www.securitytracker.com/id/1032784http://www.securitytracker.com/id/1032783http://www.securitytracker.com/id/1032778http://www.securitytracker.com/id/1032777http://www.securitytracker.com/id/1032759http://www.securitytracker.com/id/1032727http://www.securitytracker.com/id/1032702http://www.securitytracker.com/id/1032699http://www.securitytracker.com/id/1032688http://www.securitytracker.com/id/1032656http://www.securitytracker.com/id/1032655http://www.securitytracker.com/id/1032654http://www.securitytracker.com/id/1032653http://www.securitytracker.com/id/1032652http://www.securitytracker.com/id/1032651http://www.securitytracker.com/id/1032650http://www.securitytracker.com/id/1032649http://www.securitytracker.com/id/1032648http://www.securitytracker.com/id/1032647http://www.securitytracker.com/id/1032645http://www.securitytracker.com/id/1032637http://www.debian.org/security/2015/dsa-3300http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.htmlhttp://www.securitytracker.com/id/1032476http://www.securitytracker.com/id/1032475http://www.securitytracker.com/id/1032474http://www.debian.org/security/2015/dsa-3287http://rhn.redhat.com/errata/RHSA-2015-1197.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1072.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.htmlhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681https://security.gentoo.org/glsa/201701-46http://www.securitytracker.com/id/1036218http://www.securitytracker.com/id/1033067http://www.securitytracker.com/id/1033065http://www.securitytracker.com/id/1033019http://www.securitytracker.com/id/1032960http://www.securitytracker.com/id/1032932http://www.securitytracker.com/id/1032910http://www.debian.org/security/2016/dsa-3688http://www.debian.org/security/2015/dsa-3316https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196https://security.netapp.com/advisory/ntap-20150619-0001/https://support.citrix.com/article/CTX216642https://puppet.com/security/cve/CVE-2015-4000http://rhn.redhat.com/errata/RHSA-2016-2056.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1624.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1604.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1544.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1488.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1486.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1485.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1243.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1242.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1241.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1230.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1229.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1228.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1185.htmlhttp://www.securitytracker.com/id/1040630https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_ushttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixeshttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdfhttps://github.com/eSentire/nmap-esentirehttps://nvd.nist.govhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-349-21http://tools.cisco.com/security/center/viewAlert.x?alertId=39235https://usn.ubuntu.com/2673-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
seacmsCVE-2023-28393remote code executionauthentication bypassopen redirectacymailingCVE-2023-43339CVE-2023-3664openstackpopup builderCVE-2023-21987CVE-2023-21991CVE-2023-3550
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook