Man-in-the-Middle (MitM)

🗓️ 13 May 2022 10:37:10Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

openssl3 vulnerability in RC4-MD5 ciphe

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to multiple openSSL vulnerabilities in Node.js (CVE-2022-1434, CVE-2022-1343, CVE-2022-1473)	4 Jul 202213:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities [CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473]	12 Jul 202311:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	8 Jul 202217:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to issues in OpenSSL (CVE-2022-1434, CVE-2022-1343, CVE-2022-1292, CVE-2022-1473 )	1 Feb 202315:37	–	ibm
ATTACKERKB	CVE-2022-1434	3 May 202200:00	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : openssl (ALAS2022-2022-104)	7 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : openssl, openssl-devel, openssl-libs (ALAS2022-2022-195)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-051)	21 Mar 202300:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Multiple vulnerabilities (fceb2b08-cb76-11ec-a06f-d4c9ef517024)	4 May 202200:00	–	nessus

Vulners

Node

openssl3 openssl3Match3.0.0-r4os

AND

openssl3 openssl3Match3.0.0-r3os

AND

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

openssl3 openssl3Match3.0.1-r0os

AND

openssl3 openssl3Match3.0.1-r1os

AND

openssl3 openssl3Match3.0.2-r0os

AND

openssl3 openssl3Match3.0.0-r4os

AND

alpinelinux alpine_linuxMatchedge

OR

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1m-r1os

AND

openssl opensslMatch1.1.1k-r1os

AND

openssl opensslMatch1.1.1f-r0os

AND

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1l-r5os

AND

openssl opensslMatch1.1.1j-r0os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1m-r2os

AND

openssl opensslMatch3.0.0-r0os

AND

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch1.1.1m-r3os

AND

openssl opensslMatch1.1.1k-r0os

AND

openssl opensslMatch3.0.0-r2os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch1.1.1g-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20220602-0009/
openssl	www.openssl.org/news/secadv/20220503.txt

07 Nov 2023 22:18Current

7.3High risk

Vulners AI Score7.3

CVSS 24.3

CVSS 3.15.9

EPSS0.00067

openssl3 vulnerability rc4-md5 cipher man-in-the-middle attack endpoint openssl