Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Cryptographic Issues Vulnerability - CVE-2013-0169 - Vulnerability Database
OpenSSL

OpenSSL Cryptographic Issues Vulnerability - CVE-2013-0169

Low
Reference: CVE-2013-0169
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-0169
Title: OpenSSL Cryptographic Issues Vulnerability
Overview:

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2 as used in OpenSSL OpenJDK PolarSSL and other products do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets aka the quotLucky Thirteenquot issue.