TLS Vulnerability in IBM Tivoli and Security Directory Servers
CVE-2015-0138
Currently unrated
What is CVE-2015-0138?
A vulnerability exists in the GSKit component of IBM Tivoli Directory Server and IBM Security Directory Server that improperly restricts TLS state transitions. This flaw allows remote attackers to exploit the system through crafted TLS traffic, facilitating cipher-downgrade attacks to weaker EXPORT_RSA ciphers. These transitions are related to known issues like the 'FREAK' vulnerability, impacting the security of encrypted communications.