Uploaded image for project: 'controller'
  1. controller
  2. CONTROLLER-1354

[SECURITY] LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000

    XMLWordPrintable

Details

    • Bug
    • Status: Resolved
    • Resolution: Done
    • Lithium
    • None
    • karaf
    • None

    • Operating System: All
      Platform: All

    • 3552
    • Normal

    Description

      Various components of OpenDaylight are affected by the LOGJAM TLS downgrade vulnerability:

      https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4000

      Attachments

        Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. CONTROLLER-1353 [SECURITY] LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000

          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. CONTROLLER-1355 [SECURITY] LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000

          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPNFLWPLUG-485 Address various encryption related CVEs and RFCs

          • Resolved
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              mmarsale@cisco.com Maros Marsalek
              david.jorm@gmail.com David Jorm
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: