Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Cryptographic Issues Vulnerability - CVE-2008-7270 - Vulnerability Database
OpenSSL

OpenSSL Cryptographic Issues Vulnerability - CVE-2008-7270

Medium
Reference: CVE-2008-7270
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-7270
Title: OpenSSL Cryptographic Issues Vulnerability
Overview:

OpenSSL before 0.9.8j when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled does not prevent modification of the ciphersuite in the session cache which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier a different vulnerability than CVE-2010-4180.