PT-2014-3206
CVE-2013-6807
·
تاريخ النشر
2014-05-19
·
تاريخ التحديث
2014-05-19
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
OpenText Exceed OnDemand (EoD) version 8
Description
The issue allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses, due to the client supporting anonymous ciphers by default.
Recommendations
For OpenText Exceed OnDemand (EoD) version 8, consider disabling the support for anonymous ciphers to prevent man-in-the-middle attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾