The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
39.0+build5-0ubuntu0.14.04.12:3.19.2-0ubuntu0.14.04.16b36-1.13.8-0ubuntu1~14.047u79-2.5.6-0ubuntu1.14.04.11.0.1f-1ubuntu2.121:31.8.0+build1-0ubuntu0.14.04.12:3.19.2-1ubuntu1Exploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:NI:LA:NCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N