EUVD-2021-10767

Malware in sbrugna...

Security Bulletin: IBM Rational Build Forge is vulnerable to denial of service, weaker than expected security, and could allow a remote attacker to obtain sensitive information due to the use of OpenSSL

Summary IBM Rational Build Forge is vulnerable to denial of service, weaker than expected security, and could allow a remote attacker to obtain sensitive information due to the use of OpenSSL CVE-2021-23839, CVE-2021-23840, CVE-2021-23841, CVE-2020-1971, CVE-2020-1968. IBM has addressed these...

Medium: openssl

Issue Overview: OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS...

OpenSSL: Incorrect SSLv2 rollback protection (CVE-2021-23839) - Linux

OpenSSL is prone to an incorrect SSLv2 rollback protection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...