Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/04/08 9:20 a.m.73 views

Slack: Slack DTLS uses a private key that is in the public domain, which may lead to SRTP stream hijack

Affects: Janus DTLS certificate Description The Janus server in use by Slack is configured using a certificate and private key that were previously distributed by default. This certificate is used to authenticate the DTLS connection which is later used to exchange keys for the SRTP stream. As a...

0.1AI score
SaveExploits0
Rows per page
Query Builder