CVE-2014-3566 in Endeca Server

Tóm tắt

Bởi MITRE

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Đặt trước: 14/05/2014
• Tiết lộ: 14/10/2014
• Kiểm duyệt: được chấp nhận
• mục: 15
• Liên hệ: hiển thị
• CPE: sẵn sàng
• CWE: CWE-310 (Đã xác nhận)
• CVSS: 3.4 (NVD)
• EPSS: 0.99999
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3566
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3566
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3566/