CVE-2015-8960

CVE-2015-8960, also known as "Key Compromise Impersonation (KCI)," is a vulnerability in TLS 1.2 and earlier that allows man-in-the-middle attackers to spoof TLS servers. This is possible because the protocol does not adequately document how to compute the master secret in specific scenarios involving a client secret key and server public key, but not a server secret key. This flaw impacts a wide range of products from vendors including Apple, Google, Microsoft, Mozilla, NetApp, and Opera. The vulnerability carries a high severity CVSS score of 8.1, indicating a critical risk. It has a network attack vector and high attack complexity, but successful exploitation could lead to high confidentiality, integrity, and availability impacts. The EPSS score is low, suggesting a low probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention or public awareness.