Advisory details:
github_osv / GHSA-f7w7-6pjc-wwm6
| Advisory ID | github_osv/GHSA-f7w7-6pjc-wwm6 |
| Aliases |
CVE-2009-3555
|
| Summary | Apache Tomcat affected by vulnerability in TLS and SSL protocol The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue. Apache Tomcat was affected by this issue and introduced a workaround in versions 7.0.10, 6.0.32, and 5.5.33. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 8.8 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| CWE-295 | Improper Certificate Validation |
| CWE-300 | Channel Accessible by Non-Endpoint |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 9.8 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-f7w7-6pjc-wwm6/GHSA-f7w7-6pjc-wwm6.json |
| generic_textual | CRITICAL |
| Data source | Exploit-DB |
|---|---|
| Date added | Nov. 9, 2009 |
| Description | Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass |
| Ransomware campaign use | Known |
| Source publication date | Nov. 10, 2009 |
| Exploit type | remote |
| Platform | multiple |
| Source URL | https://www.securityfocus.com/bid/35888/info |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-05-27T15:38:52Z/
Decision: Track*
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2009/3xxx/CVE-2009-3555.json
Source Advisory: vulnrichment/CVE-2009-3555
[{'Exploitation': 'poc'},
{'Automatable': 'yes'},
{'Technical Impact': 'total'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]