3 matches found
CVE-2023-54356
Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which over very long-lived TLS connections carryi...
9.3CVSS5.9AI score0.00147EPSS
SaveExploits0References2
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
5.3CVSS6.9AI score
SaveExploits0References2
Fixed in Apache Tomcat 5.5.17, 5.0.SVN
Important: Information disclosure CVE-2007-1858 The default SSL configuration permitted the use of insecure cipher suites including the anonymous cipher suite. The default configuration no longer permits the use of insecure cipher suites. Affects: 5.0.0-5.0.30, 5.5.0-5.5.16...
2.6CVSS6AI score0.18254EPSS
SaveExploits0Affected Software1
20