CVE-2020-36363

CVE-2020-36363 concerns Amazon AWS CloudFront where TLSv1.2_2019 configurations allow weak ciphers TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384. The root cause is the inclusion of these CBC-based ciphers in the CloudFront TLS policy, which is cited as a security...