Man-in-the-Middle Vulnerability in EMC RSA BSAFE Micro Edition Suite and SSL-J

CVE-2014-4630

Summary

EMC RSA BSAFE Micro Edition Suite and RSA BSAFE SSL-J contain a vulnerability where the system does not verify that the X.509 certificate of a server remains consistent during TLS session renegotiation. As a result, this flaw permits attackers to conduct a man-in-the-middle attack, potentially allowing unauthorized access to sensitive data or manipulation of existing TLS session data through a technique known as a triple handshake.

References