Lucene search

K
hackeroneDoglifeH1:217431
HistoryMar 31, 2017 - 12:18 p.m.

Udemy: sweet32

2017-03-3112:18:22
doglife
hackerone.com
76

0.005 Low

EPSS

Percentile

77.1%

hello
have found new attack against 3DES-CBC cipher in TLS,that they can decrypt customer data using a method called SWEET32 Birthday Attack.
This Vulnerability has got CVE-2016-2183 and has cvss score 5.0
in atach you will see a print screen vuln confirmation by nmap script
Mitigation for SWEET32 attack
Prefer minimum 128-bit cipher suites
Limit the length of TLS sessions with a 64-bit cipher, which could be done with TLS renegotiation or closing and starting a new connection
Disable cipher suites using 3DES