Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13127
HistoryJan 15, 2019 - 9:26 a.m.

Man-in-the-Middle (MitM)

2019-01-1509:26:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.043 Low

EPSS

Percentile

92.3%

nss is vulnerable to man-in-the-middle attack. ServerHello.random is all zeros when handling a v2-compatible ClientHello, which would allow an attacker to perform man-in-the-middle attack to perform a passive replay attack.