Insecure Cryptographic Algorithms

2024-01-0412:16:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

karmada

tls protocol

3des cipher

vulnerability

security

AI Score

Confidence

High

JSON

github.com/karmada-io/karmada is vulnerable to Insecure Cryptographic Algorithms. The vulnerability is due to the default cipher suits as part of the TLS protocol, which includes the 3DES cypher that is deemed insecure. Attackers could exploit this weaknesses to break TLS security.

Affected configurations

Vulners

Node

veracodegithub.com\/karmada-io\/karmadaRangev1.8.0-preview2–v1.8.0-preview2

VendorProductVersionCPE
veracodegithub.com\/karmada-io\/karmada*cpe:2.3:a:veracode:github.com\/karmada-io\/karmada:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
veracode	github.com\/karmada-io\/karmada	*	cpe:2.3:a:veracode:github.com\/karmada-io\/karmada::::::::

References

github.com/advisories/GHSA-7xg2-83f8-39mr

github.com/karmada-io/karmada/commit/98e655fc552b2987c3f2d2a061007889ce8be536

github.com/karmada-io/karmada/commit/c3c376605403e07ca0ed2dc39c9e0f3c38f8e29d

AI Score

Confidence

High

JSON