Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-6593.
PoCs published by Ramon de C Valle, including Metasploit module auxiliary/server/jsse_skiptls_mitm_proxy.
AI-analyzed exploit summary This Ruby script exploits CVE-2014-6593, a vulnerability in TLS/DTLS implementations that allows man-in-the-middle attacks by manipulating handshake messages. It intercepts and modifies TLS traffic to bypass authentication by injecting a forged 'Finished' message.
Description
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
Exploits (2)
This Ruby script exploits CVE-2014-6593, a vulnerability in TLS/DTLS implementations that allows man-in-the-middle attacks by manipulating handshake messages. It intercepts and modifies TLS traffic to bypass authentication by injecting a forged 'Finished' message.
This Metasploit module exploits CVE-2014-6593 in Java Secure Socket Extension (JSSE) by performing a MITM attack to downgrade a TLS session to plaintext, allowing interception of application data. It acts as a proxy between client and server, manipulating handshake messages to bypass authentication.