Uploaded image for project: 'controller'
  1. controller
  2. CONTROLLER-1355

[SECURITY] LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000

    XMLWordPrintable

Details

    • Bug
    • Status: Resolved
    • Resolution: Done
    • Beryllium
    • None
    • karaf
    • None

    • Operating System: All
      Platform: All

    • 3553
    • Normal

    Description

      Various components of OpenDaylight are affected by the LOGJAM TLS downgrade vulnerability:

      https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4000

      Attachments

        Issue Links

          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. CONTROLLER-1354 [SECURITY] LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks CVE-2015-4000

          • Resolved
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              Unassigned Unassigned
              david.jorm@gmail.com David Jorm
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: