Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wfwq-hhcq-h62r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

EPSS

Процентиль: 36%
0.00151
Низкий

Дефекты

CWE-311