High 8.1Published Sep 20, 2016

CVE-2015-8960The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute t…

Updated under an hour ago (Nov 2, 2026, 3:00 AM ET)

Does this affect you?

It affects ietf transport_layer_security and 12 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for ietf transport_layer_security Exploited in the last 30 days

The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue.

CVSS: 8.1 HIGH (v3.1, NVD)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-295
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

ietf transport_layer_security ietf:transport_layer_security	through 1.2	NVD
netapp clustered_data_ontap_antivirus_connector netapp:clustered_data_ontap_antivirus_connector	all versions	NVD
netapp data_ontap_edge netapp:data_ontap_edge	all versions	NVD
netapp host_agent netapp:host_agent	all versions	NVD
netapp oncommand_shift netapp:oncommand_shift	all versions	NVD
netapp plug-in_for_symantec_netbackup netapp:plug-in_for_symantec_netbackup	all versions	NVD
netapp smi-s_provider netapp:smi-s_provider	all versions	NVD
netapp snap_creator_framework netapp:snap_creator_framework	all versions	NVD
netapp snapdrive netapp:snapdrive	all versions; all versions	NVD
netapp snapmanager netapp:snapmanager	all versions; all versions	NVD
1–10 of 13

References

References

http://twitter.com/matthew_d_green/statuses/630908726950674433	press/media-coverage, technical-description, third-party-advisory
http://www.openwall.com/lists/oss-security/2016/09/20/4	mailing-list, technical-description, third-party-advisory
http://www.securityfocus.com/bid/93071	broken-link, third-party-advisory, vdb-entry
https://kcitls.org	exploit, technical-description
https://security.netapp.com/advisory/ntap-20180626-0002/	third-party-advisory
https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf	exploit, mitigation, technical-description

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.