The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.
References
Link | Resource |
---|---|
https://github.com/koto/exceed-mitm |
Configurations
Information
Published : 2014-05-19 07:55
Updated : 2014-05-19 12:16
NVD link : CVE-2013-6807
Mitre link : CVE-2013-6807
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
opentext
- exceed_ondemand