{
  "schema_version": "1.4.0",
  "id": "GHSA-9qf5-mg9m-h7pc",
  "modified": "2025-01-27T21:30:41Z",
  "published": "2022-05-17T05:28:03Z",
  "aliases": [
    "CVE-2012-3372"
  ],
  "details": "** DISPUTED ** The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Cyberoam_SSL_CA certificate in a list of trusted root certification authorities.  NOTE: the vendor disputes the significance of this issue because the appliance \"does not allow import or export of the foresaid private key.\"",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
    }
  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3372"
    },
    {
      "type": "WEB",
      "url": "https://blog.torproject.org/blog/security-vulnerability-found-cyberoam-dpi-devices-cve-2012-3372"
    },
    {
      "type": "WEB",
      "url": "https://media.torproject.org/misc/2012-07-03-cyberoam-CVE-2012-3372.txt"
    },
    {
      "type": "WEB",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-07/0021.html"
    },
    {
      "type": "WEB",
      "url": "http://blog.cyberoam.com/2012/07/ssl-bridging-cyberoam-approach"
    },
    {
      "type": "WEB",
      "url": "http://www.theregister.co.uk/2012/07/07/cyberoam_tor_ssl_spying_flap"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-07-09T10:20:00Z"
  }
}