https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 19:02:40 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-478 CERTFR-2015-AVI-478 https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-478 https://vulnerability.circl.lu/vuln/bdu:2015-12039 bdu:2015-12039 https://vulnerability.circl.lu/vuln/bdu:2015-12039 https://vulnerability.circl.lu/vuln/cnvd-2015-07590 cnvd-2015-07590 https://vulnerability.circl.lu/vuln/cnvd-2015-07590 https://vulnerability.circl.lu/vuln/fkie_cve-2015-6112 <p>SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server&#39;s X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a &#34;triple handshake attack,&#34; aka &#34;Schannel TLS Triple Handshake Vulnerability.&#34;</p> <p>SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server&#39;s X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a &#34;triple handshake attack,&#34; aka &#34;Schannel TLS Triple Handshake Vulnerability.&#34;</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-6112 https://vulnerability.circl.lu/vuln/ghsa-3x7v-wjr7-jrcm <p>SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server&#39;s X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a &#34;triple handshake attack,&#34; aka &#34;Schannel TLS Triple Handshake Vulnerability.&#34;</p> <p>SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server&#39;s X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a &#34;triple handshake attack,&#34; aka &#34;Schannel TLS Triple Handshake Vulnerability.&#34;</p> https://vulnerability.circl.lu/vuln/ghsa-3x7v-wjr7-jrcm https://vulnerability.circl.lu/vuln/gsd-2015-6112 gsd-2015-6112 https://vulnerability.circl.lu/vuln/gsd-2015-6112