Описание
TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.0.2 (включая)
cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*
EPSS
Процентиль: 36%
0.00151
Низкий
7.5 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-327
Связанные уязвимости
github
больше 3 лет назад
TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.
EPSS
Процентиль: 36%
0.00151
Низкий
7.5 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-327