Zakir Durumeric

Name of the Vulnerable Software and Affected Versions: TitanHQ WebTitan Gateway (affected versions not specified) Description: The issue concerns incorrect certificate validation for the TLS interception feature. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient entropy for SSH and SSL keys, making it easier for remote attackers to gain access by leveraging knowledge of a key from another product installation.

The issue is related to insufficient entropy for private keys, making it easier for man-in-the-middle attackers to spoof HTTPS or SSH servers by predicting a key value.