Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q2v2-6g2j-qv56

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

EPSS

Процентиль: 62%
0.00431
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 9 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

CVSS3: 7.5
nvd
больше 9 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

CVSS3: 7.5
debian
больше 9 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signat ...

EPSS

Процентиль: 62%
0.00431
Низкий

7.5 High

CVSS3

Дефекты

CWE-20