Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q2v2-6g2j-qv56

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

EPSS

Процентиль: 81%
0.02118
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 10 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

CVSS3: 7.5
nvd
больше 10 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

CVSS3: 7.5
debian
больше 10 лет назад

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signat ...

EPSS

Процентиль: 81%
0.02118
Низкий

7.5 High

CVSS3

Дефекты

CWE-20