Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2015-3193 - Vulnerability Database
OpenSSL

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2015-3193

High
Reference: CVE-2015-3193
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3193
Title: OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform as used by the BN_mod_exp function mishandles carry propagation and produces incorrect output which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.