CRIME vulnerability via the SPDY protocol CVE-2012-4930

🗓️ 19 Dec 2012 23:42:00Reported by f5Type

f5🔗 support.f5.com👁 111 Views

SPDY protocol vulnerability allows man-in-the-middle attackers to obtain plain text HTTP headers by observing length differences during TLS encryption of compressed data. Impact: Connections to virtual servers configured with SPDY profile may be at risk. Mitigation: Upgrade to non-vulnerable version or disable SPDY compression.

Reporter	Title	Published	Views	Family All 201
IBM Security Bulletins	Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerability in OpenSSL (CVE-2012-4929)	3 Mar 202019:02	–	ibm
IBM Security Bulletins	Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities	26 Sep 202204:23	–	ibm
Tenable Nessus	SeaMonkey 2.x < 2.12 Multiple Vulnerabilities	30 Aug 201200:00	–	nessus
Tenable Nessus	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	5 Jun 201300:00	–	nessus
Tenable Nessus	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	5 Jun 201300:00	–	nessus
Tenable Nessus	Mozilla SeaMonkey 2.x < 2.12 Multiple Vulnerabilities	30 Aug 201200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openssl (ALAS-2013-171)	4 Sep 201300:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : openssl (CESA-2013:0587)	7 Mar 201300:00	–	nessus
Tenable Nessus	Debian DLA-400-1 : pound security update (BEAST) (POODLE)	25 Jan 201600:00	–	nessus

08 Nov 2016 07:34Current

6Medium risk

Vulners AI Score6

CVSS 22.6

EPSS0.08487