The vulnerability of the software for interacting with servers via cURL, related to the exchange of keys without authenticating the object, allows attackers to perform “man-in-the-middle” attacks.

The vulnerability of the software for interacting with servers via cURL is related to the exchange of keys without authenticating the object. Exploiting this vulnerability allows a remote attacker to perform “man-in-the-middle” attacks...

CVE-2021-38878

IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756...

PT-2022-10793 · Ibm · Ibm Qradar

Name of the Vulnerable Software and Affected Versions: IBM QRadar versions 7.3 through 7.5 Description: The issue allows a malicious actor to impersonate an actor due to key exchange without entity authentication. Recommendations: For IBM QRadar versions 7.3 through 7.5, at the moment, there is n...

IBM QRadar SIEM 授权问题漏洞

IBM QRadar SIEM is a suite of solutions from IBM USA that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRad...

Intel Security Library 安全漏洞

Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security vulnerability exists in the IntelR Security Library prior to version 3.3, which stems from a key exchange in the library that is not physically authenticated and could allow an...

Anonymous Key Exchanges Supported (PCI DSS)

At least one of the SSL or TLS services on the remote host supports an anonymous DH or anonymous ECDH cipher. When an anonymous cipher is used, the client does not authenticate the server and an attacker may intercept and modify encrypted traffic. C Tenable Network Security, Inc...