PT-2021-12013

CVE-2020-36363

·

Published

2021-08-12

·

Updated

2021-08-23

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Amazon AWS CloudFront (affected versions not specified)
Description: The issue concerns Amazon AWS CloudFront TLSv1.2 2019, which allows the use of TLS ECDHE RSA WITH AES 128 CBC SHA256 and TLS ECDHE RSA WITH AES 256 CBC SHA384. Some entities consider these to be weak ciphers.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Related identifiers
CVE-2020-36363
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com