What’s Vulnerable › Vulnerabilities

CVE-2015-3932

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-21 · updated 2026-06-17
• Weakness: CWE-91

Description

Netlock Mokka before 2.7.8.1204 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepended to a valid ds:Object.

Affected products

• Netlock Mokka: through 2.7

References

• http://packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.html
• http://www.neih.gov.hu/?q=node/66
• http://www.securityfocus.com/bid/75489
• https://www.search-lab.hu/about-us/news/107-37-million-digitally-signed-documents-had-to-be-reverified
• https://www.search-lab.hu/eakta
• http://packetstormsecurity.com/files/132473/Microsec-e-Szigno-Netlock-Mokka-XML-Signature-Wrapping.html
• http://www.neih.gov.hu/?q=node/66
• http://www.securityfocus.com/bid/75489
• https://www.search-lab.hu/about-us/news/107-37-million-digitally-signed-documents-had-to-be-reverified
• https://www.search-lab.hu/eakta

Get alerted when CVE-2015-3932 or the next vulnerability affects your stack