Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:17079
HistoryMay 02, 2019 - 5:39 a.m.

Information Disclosure

2019-05-0205:39:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18

0.003 Low

EPSS

Percentile

69.6%

JSON

IBM Java SE is vulnerable to information disclosure. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the “Bar Mitzvah” issue.

References

Related

ibm 173
prion 1
nvd 1
cve 1
nessus 12
debiancve 1
huawei 1
f5 2
openvas 3
cvelist 1
ubuntucve 1
aix 1
checkpoint_advisories 1
ibm
ibm
Security Bulletin: Vulnerability in RC4 stream cipher affects Tivoli/Security Key Lifecycle Manager (CVE-2015-2808)
2018-06-16 21:24:03
Security Bulletin: Vulnerability in RC4 stream cipher affects IBM SONAS (CVE-2015-2808)
2018-06-18 00:09:28
Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Workload Deployer (CVE-2015-2808)
2018-06-15 07:03:00
prion
prion
Design/Logic Flaw
2015-04-01 02:00:00
nvd
nvd
CVE-2015-2808
2015-04-01 02:00:35
cve
cve
CVE-2015-2808
2015-04-01 02:00:35
nessus
nessus
IBM Storwize SSL/TLS RC4 Stream Cipher Key Invariance (Bar Mitzvah)
2016-06-16 00:00:00
AIX 6.1 TL 9 : bos.net.tcp.server (U863668) (Bar Mitzvah)
2015-12-04 00:00:00
Atlassian JIRA < 6.4.10 / 7.0.0-OD-02 MitM Plaintext Disclosure (Bar Mitzvah)
2015-12-07 00:00:00
debiancve
debiancve
CVE-2015-2808
2015-04-01 02:00:35
huawei
huawei
Security Advisory - Bar Mitzvah Attack Vulnerability in Huawei Products
2015-09-19 00:00:00
f5
f5
K16864 : SSL/TLS RC4 vulnerability CVE-2015-2808
2015-08-17 00:00:00
SOL16864 - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-07-08 00:00:00
openvas
openvas
F5 BIG-IP - SSL/TLS RC4 vulnerability CVE-2015-2808
2015-09-18 00:00:00
SSL/TLS: Report Weak Cipher Suites
2012-03-01 00:00:00
HPE Network Products Multiple Remote Vulnerabilities
2016-11-25 00:00:00
cvelist
cvelist
CVE-2015-2808
2015-04-01 00:00:00
ubuntucve
ubuntucve
CVE-2015-2808
2015-03-31 00:00:00
aix
aix
Vulnerability in RC4 stream cipher affects AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on AIX,Vulnerability in RC4 stream cipher affects ftpd/sendmail_ssl/imapd/popd on VIOS
2015-04-27 15:27:04
checkpoint_advisories
checkpoint_advisories
Weak SSL RC4 Cipher Suites (CVE-2013-2566; CVE-2015-2808)
2015-05-17 00:00:00

0.003 Low

EPSS

Percentile

69.6%

JSON
Related for VERACODE:17079
ibm173prion1nvd1cve1nessus12debiancve1huawei1f52openvas3cvelist1ubuntucve1aix1checkpoint_advisories1