Lucene search

K
cvelistMozillaCVELIST:CVE-2013-1740
HistoryJan 18, 2014 - 10:00 p.m.

CVE-2013-1740

2014-01-1822:00:00
mozilla
raw.githubusercontent.com
2

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.8%

The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.