CVE-2012-3372 - Vulnerability Details - OpenCVE

The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance "does not allow import or export of the foresaid private key.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00071.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Elitecore	Cyberoam Unified Threat Management

Configuration 1 [-]

cpe:2.3:h:elitecore:cyberoam_unified_threat_management:*:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html
http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/
http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/
https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372
https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt

History

Mon, 27 Jan 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-07-09T10:00:00.000Z

Updated: 2025-01-27T21:07:51.463Z

Reserved: 2012-06-14T00:00:00.000Z

Link: CVE-2012-3372

Vulnrichment

Updated: 2024-08-06T20:05:12.354Z

NVD

Status : Deferred

Published: 2012-07-09T10:20:44.417

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-3372

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-07-09T10:00:00.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"tags": ["x_refsource_MISC"], "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"tags": ["x_refsource_MISC"], "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"tags": ["x_refsource_MISC"], "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}], "tags": ["disputed"], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-3372", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "** DISPUTED ** The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt", "refsource": "MISC", "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"name": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/", "refsource": "MISC", "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"name": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372", "refsource": "MISC", "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"name": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/", "refsource": "MISC", "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:12.354Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-01-21T19:32:24.195135Z", "id": "CVE-2012-3372", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T21:07:51.463Z"}}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-3372", "datePublished": "2012-07-09T10:00:00.000Z", "dateReserved": "2012-06-14T00:00:00.000Z", "dateUpdated": "2025-01-27T21:07:51.463Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-07-09T10:00:00.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"tags": ["x_refsource_MISC"], "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"tags": ["x_refsource_MISC"], "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"tags": ["x_refsource_MISC"], "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}], "tags": ["disputed"], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2012-3372", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "** DISPUTED ** The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt", "refsource": "MISC", "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"name": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/", "refsource": "MISC", "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"name": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372", "refsource": "MISC", "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"name": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/", "refsource": "MISC", "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T20:05:12.354Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"name": "20120703 Cyberoam advisory", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2012-3372", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-21T19:32:24.195135Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-21T19:32:09.694Z"}}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2012-3372", "datePublished": "2012-07-09T10:00:00.000Z", "dateReserved": "2012-06-14T00:00:00.000Z", "dateUpdated": "2025-01-27T21:07:51.463Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:elitecore:cyberoam_unified_threat_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F6D1E67-3012-4230-AAA8-3770ADC6BD0C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "secalert@redhat.com", "tags": ["disputed"]}], "descriptions": [{"lang": "en", "value": "The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities. NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key."}, {"lang": "es", "value": "** EN DISPUTA ** La configuraci\u00f3n por defecto del dispositivo Cyberoam UTM utiliza la misma clave privada en distintas instalaciones de clientes, lo que que facilita a atacantes MITM (man-in-the-Middle u hombre-en-medio) a espiar servidores SSL aprovechando la presencia del certificado Cyberoam_SSL_CA en una lista de confianza de autoridades emisoras de certificados ra\u00edz. NOTA: el vendedor se opone a la importancia de esta cuesti\u00f3n, porque el dispositivo \"no permite la importaci\u00f3n o exportaci\u00f3n de la mencionada clave privada\""}], "id": "CVE-2012-3372", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2012-07-09T10:20:44.417", "references": [{"source": "secalert@redhat.com", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"source": "secalert@redhat.com", "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}, {"source": "secalert@redhat.com", "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"source": "secalert@redhat.com", "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"source": "secalert@redhat.com", "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Primary"}]}