Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:26795
HistorySep 21, 2020 - 6:18 a.m.

Information Disclosure

2020-09-2106:18:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.004 Low

EPSS

Percentile

72.9%

openssl is vulnerable to information disclosure. The vulenerability exists through the ability to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite, if an implementation re-uses a DH secret across multiple TLS connections.