CVE-2015-3230

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.57%

Published

Oct 29, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

389 Directory Server (formerly Fedora Directory Server) before 1.3.3.12 does not enforce the nsSSL3Ciphers preference when creating an sslSocket, which allows remote attackers to have unspecified impact by requesting to use a disabled cipher.

Weaknesses (CWE)

CWE-254

Affected Products (1)

fedoraproject · 389_directory_servervulnerable

References (8)

http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html

https://bugzilla.redhat.com/show_bug.cgi?id=1230996

https://fedorahosted.org/389/ticket/48194

http://directory.fedoraproject.org/docs/389ds/releases/release-1-3-3-12.html

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168985.html

https://bugzilla.redhat.com/show_bug.cgi?id=1230996

https://fedorahosted.org/389/ticket/48194

KEV Catalog EPSS Scores Vendors All CVEs