{"vulnerability": "cve-2015-1793", "sightings": [{"uuid": "f707d56e-5705-4048-9772-bb74e7e0530a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1793", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "82989d21-8cc0-4d2d-8041-c1901d299ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1793", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:37.000000Z"}, {"uuid": "52608089-a459-470e-a4ee-ab0959c64f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1793", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "fe3c4fa4-3456-482f-b085-1c4cbc762e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1793", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy.rb", "content": "{\"actions\": [{\"description\": \"Run MITM proxy\", \"name\": \"Service\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"David Benjamin\", \"Adam Langley\", \"Ramon de C Valle \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a logic error in OpenSSL by impersonating the server\\n        and sending a specially-crafted chain of certificates, resulting in\\n        certain checks on untrusted certificates to be bypassed on the client,\\n        allowing it to use a valid leaf certificate as a CA certificate to sign a\\n        fake certificate. The SSL/TLS session is then proxied to the server\\n        allowing the session to continue normally and application data transmitted\\n        between the peers to be saved.\\n\\n        The valid leaf certificate must not contain the keyUsage extension or it\\n        must have at least the keyCertSign bit set (see X509_check_issued function\\n        in crypto/x509v3/v3_purp.c); otherwise; X509_verify_cert fails with\\n        X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. This module requires an\\n        active man-in-the-middle attack.\", \"disclosure_date\": \"2015-07-09\", \"fullname\": \"auxiliary/server/openssl_altchainsforgery_mitm_proxy\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"OpenSSL Alternative Chains Certificate Forgery MITM Proxy\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"server/openssl_altchainsforgery_mitm_proxy\", \"references\": [\"CVE-2015-1793\", \"CWE-754\", \"URL-http://git.openssl.org/?p=openssl.git;a=commit;h=f404943bcab4898d18f3ac1b36479d1d7bbbb9e6\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:13.268600Z"}]}