Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/08/26 9:22 a.m.28 views

GSA Bounty: federalist.18f.gov vulnerable to Sweet32 attack

The researcher noted that federalist.18f.gov allows use of the TLSRSAWITH3DESEDECBCSHA cipher, which is now marked as "weak" in SSL labs because of risks of MitM attacks given this vulnerability: https://sweet32.info/, which requires monitoring of a long lived HTTPS connection. We inherit this...

0.3AI score
SaveExploits0
Rows per page
Query Builder