CVE-2013-6169

2013-10-1723:55:00

CWE-310

[email protected]

web.nvd.nist.gov

cve-2013-6169

ejabberd

tls

ssl

vulnerability

nvd

5.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

50.6%

JSON

The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.

CPENameOperatorVersion
process-one:ejabberdprocess-one ejabberdeq2.1.9
process-one:ejabberdprocess-one ejabberdeq2.1.7
process-one:ejabberdprocess-one ejabberdeq2.0.5
process-one:ejabberdprocess-one ejabberdeq2.1.10
process-one:ejabberdprocess-one ejabberdeq0.9.1
process-one:ejabberdprocess-one ejabberdeq2.1.11
process-one:ejabberdprocess-one ejabberdeq2.0.3
process-one:ejabberdprocess-one ejabberdeq1.1.1.1
process-one:ejabberdprocess-one ejabberdeq1.1.2
process-one:ejabberdprocess-one ejabberdeq0.9.8

CPE	Name	Operator	Version
process-one:ejabberd	process-one ejabberd	eq	2.1.9
process-one:ejabberd	process-one ejabberd	eq	2.1.7
process-one:ejabberd	process-one ejabberd	eq	2.0.5
process-one:ejabberd	process-one ejabberd	eq	2.1.10
process-one:ejabberd	process-one ejabberd	eq	0.9.1
process-one:ejabberd	process-one ejabberd	eq	2.1.11
process-one:ejabberd	process-one ejabberd	eq	2.0.3
process-one:ejabberd	process-one ejabberd	eq	1.1.1.1
process-one:ejabberd	process-one ejabberd	eq	1.1.2
process-one:ejabberd	process-one ejabberd	eq	0.9.8