182 matches found
mod_ssl -- SSLCipherSuite bypass
It is possible for clients to use any cipher suite configured by the virtual host, whether or not a certain cipher suite is selected for a specific directory. This might result in clients using a weaker encryption than originally configured...
7.5CVSS6.3AI score0.13835EPSS
SaveExploits0References2
PT-2001-2563
Name of the Vulnerable Software and Affected Versions OpenSSH affected versions not specified Description The issue allows remote servers to conduct man-in-the-middle attacks by exploiting the SSH-1 protocol. This is done by creating a Session ID that matches the target server's Session ID but us...
7.5CVSS6.4AI score0.06268EPSS
SaveExploits0References4
20