CVE Catalog
CVE-2015-3278
CriticalSummary
The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, allowing attackers to have unspecified impact via unknown vectors.
Risk Assessment
This vulnerability may lead to unpredictable security consequences, posing a risk to the organization.
Recommendation
It is recommended to review and update cipher configurations and monitor the system for potential attacks.
Original NVD description (English source)
The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, which allows attackers to have unspecified impact via unknown vectors.