Lucene search
+L

4 matches found

NVD
NVD
added 2017/01/12 11:59 p.m.28 views

CVE-2016-10027

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response...

5.9CVSS5.8AI score0.01519EPSS
Exploits0References7
Prion
Prion
added 2017/01/12 11:59 p.m.19 views

Race condition

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response...

4.3CVSS7.2AI score0.01519EPSS
Exploits0References7Affected Software2
RedhatCVE
RedhatCVE
added 2016/12/23 7:47 a.m.28 views

CVE-2016-10027

Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" feature from a server response...

7.5CVSS5.3AI score0.01519EPSS
Exploits0References1
securityvulns
securityvulns
added 2014/08/11 12:0 a.m.103 views

CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java

CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java =================================================================== Smack http://www.igniterealtime.org/projects/smack/ is an Open Source XMPP Jabber client library for instant messaging and presence written in Java. Smack prior ...

6.8CVSS0.8AI score0.0123EPSS
Exploits0
Rows per page
Query Builder