The TLS protocol 1.2 and earlier, when a DHE_EXPORT...
Moderate severity
Unreviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Oct 22, 2024
Description
Published by the National Vulnerability Database
May 21, 2015
Published to the GitHub Advisory Database
May 13, 2022
Last updated
Oct 22, 2024
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
References