Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6144
HistoryApr 19, 2018 - 2:29 a.m.

Improper Verification Of MAC

2018-04-1902:29:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.001

Percentile

30.7%

tlslite-ng is vulnerable to improper verification of MAC. The vulnerability exists as an off-by-one error occurs during the verification of MAC when the padding is a single 0x00 byte, resulting in having the MAC to always be verified.

EPSS

0.001

Percentile

30.7%