CVE-2013-6169

Опубликовано: 17 окт. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*

Версия до 2.1.12 (включая)

cpe:2.3:a:process-one:ejabberd:0.9:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:0.9.8:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:1.1.14:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.1_2:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.5:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.6:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.7:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.10:*:*:*:*:*:*:*

cpe:2.3:a:process-one:ejabberd:2.1.11:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01595

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2013-6169

ubuntu

около 13 лет назад

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

CVE-2013-6169

debian

около 13 лет назад

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) we ...

GHSA-wm48-6fcf-h8jf

github

больше 4 лет назад

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

ALT-PU-2016-1317

altlinux

больше 10 лет назад

ALT-PU-2016-1317: package `ejabberd` update to version 2.1.13-alt1

EPSS

Процентиль: 76%

0.01595

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310