Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:17079
HistoryMay 02, 2019 - 5:39 a.m.

Information Disclosure

2019-05-0205:39:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON

IBM Java SE is vulnerable to information disclosure. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the “Bar Mitzvah” issue.

References

Related

ibm 175
nessus 12
huawei 1
openvas 3
f5 2
prion 1
debiancve 1
cve 1
ubuntucve 1
aix 1
checkpoint_advisories 1
ibm
ibm
Security Bulletin: Vulnerability in RC4 stream cipher affects Real-time Compression Appliance (CVE-2015-2808)
2018-06-18 00:09:28
Security Bulletin: Vulnerability in RC4 stream cipher affects OpenPages GRC Platform with Application Server (CVE-2015-2808)
2018-06-15 22:37:00
Security Bulletin: Vulnerability in RC4 stream cipher affects Rational Developer for i, Rational Developer for AIX and Linux, and Rational Developer for Power Systems Software (CVE-2015-2808)
2018-08-03 04:23:43
nessus
nessus
AIX 6.1 TL 9 : bos.net.tcp.server (U863668) (Bar Mitzvah)
2015-12-04 00:00:00
Atlassian JIRA < 6.4.10 / 7.0.0-OD-02 MitM Plaintext Disclosure (Bar Mitzvah)
2015-12-07 00:00:00
F5 Networks BIG-IP : SSL/TLS RC4 vulnerability (K16864) (Bar Mitzvah)
2015-09-18 00:00:00
huawei
huawei
Security Advisory - Bar Mitzvah Attack Vulnerability in Huawei Products
2015-09-19 00:00:00
openvas
openvas
F5 BIG-IP - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-09-18 00:00:00
SSL/TLS: Report Weak Cipher Suites
2012-03-01 00:00:00
HPE Network Products Multiple Remote Vulnerabilities
2016-11-25 00:00:00
f5
f5
K16864 : SSL/TLS RC4 vulnerability CVE-2015-2808
2015-08-17 00:00:00
SOL16864 - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-07-08 00:00:00
prion
prion
Design/Logic Flaw
2015-04-01 02:00:00
debiancve
debiancve
CVE-2015-2808
2015-04-01 02:00:00
cve
cve
CVE-2015-2808
2015-04-01 02:00:00
ubuntucve
ubuntucve
CVE-2015-2808
2015-03-31 00:00:00
aix
aix
Vulnerability in RC4 stream cipher affects AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on VIOS
2015-04-27 15:27:04
checkpoint_advisories
checkpoint_advisories
Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)
2015-05-17 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:17079
ibm175nessus12huawei1openvas3f52prion1debiancve1cve1ubuntucve1aix1checkpoint_advisories1