CVE-2015-3197

CVE-2015-3197 is a medium-severity vulnerability affecting OpenSSL versions 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f, as well as Oracle products utilizing these OpenSSL versions. It allows man-in-the-middle attackers to bypass cryptographic protections by enabling the use of disabled ciphers in SSLv2 traffic. The vulnerability has a CVSS score of 5.9, indicating a network-based attack with high impact on confidentiality, but high attack complexity. Although there is no known active exploitation, exploit code, or Metasploit modules, the vulnerability has garnered significant community discussion and media coverage, suggesting a notable level of awareness.