Lucene search
Veracode Vulnerability DatabaseVERACODE:3983HistoryApr 27, 2017 - 6:38 a.m.
Blockwise Chosen-boundary Attacks
2017-04-2706:38:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
EPSS
0.006
Percentile
78.8%
github.com/openshift/origin is vulnerable to blockwise chosen-boundary attacks (aka) the “BEAST” attack. It encrypts data by using CBC mode with chained initialization vectors which allows attackers to obtain plaintext HTTP headers through blockwise chosen-boundary attacks on HTTPS sessions. This artifact is related to CVE-2011-3389.
Related
openvas
openvas
Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)
2012-01-11 00:00:00
FreeBSD Ports: fetchmail
2012-08-30 00:00:00
Fedora Update for thunderbird-lightning FEDORA-2011-17400
2012-04-02 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: xulrunner-9.0-2.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: thunderbird-9.0-4.fc16
2011-12-23 03:31:27
[SECURITY] Fedora 16 Update: nss-softokn-3.13.1-14.fc16
2011-12-23 03:31:27
veracode
veracode
Man-in-the-Middle (MitM)
2019-05-02 04:55:58
nessus
nessus
debiancve
debiancve
CVE-2011-3389
2011-09-06 19:55:03
prion
prion
Session fixation
2011-09-06 19:55:00
mskb
mskb
osv
osv
CGA-m3vx-v2q7-5ghm
2024-06-06 12:28:22
lighttpd - several
2011-12-20 00:00:00
curl - several
2012-03-31 00:00:00
checkpoint_security
checkpoint_security
Check Point response to CVE-2011-3389 aka BEAST attack
2012-10-15 22:00:00
ibm
ibm
cert
cert
SSL 3.0 and TLS 1.0 allow chosen plaintext attack in CBC modes
2011-09-27 00:00:00
seebug
seebug
Microsoft Windows SSL/TLS信息泄露漏洞
2011-09-29 00:00:00
Apple XCode 4.x 信息泄露漏洞
2012-07-27 00:00:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
cve
cve
CVE-2011-3389
2011-09-06 19:55:03
CVE-2004-2770
2011-09-25 10:55:04
ics
ics
Siemens Ruggedcom WIN Products BEAST Attack Vulnerability
2018-09-06 12:00:00
Siemens SIMATIC RF6XXR
2019-07-11 12:00:00
securityvulns
securityvulns
ESA-2012-032: RSA BSAFE® Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2014-05-05 00:00:00
ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
2012-10-29 00:00:00
ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
2014-04-07 00:00:00
freebsd
freebsd
fetchmail -- chosen plaintext attack against SSL CBC initialization vectors
2012-01-19 00:00:00
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-3389
2011-11-16 00:00:00
cvelist
cvelist
CVE-2011-3389
2011-09-06 19:00:00
debian
debian
[SECURITY] [DSA 2398-2] curl regression
2012-03-31 19:38:57
[SECURITY] [DSA 2398-1] curl security update
2012-01-30 19:49:07
[SECURITY] [DSA 2368-1] lighttpd security update
2011-12-21 00:24:51
rubygems
rubygems
rapid7blog
rapid7blog
f5
f5
gentoo
gentoo
cURL: Multiple vulnerabilities
2012-03-06 00:00:00