Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gh5q-rh5p-wvqr

Опубликовано: 05 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."

"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."

EPSS

Процентиль: 35%
0.00142
Низкий

7.5 High

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."

EPSS

Процентиль: 35%
0.00142
Низкий

7.5 High

CVSS3

Дефекты

CWE-327