Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-2183 - Vulnerability Database
Python

Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2016-2183

High
Reference: CVE-2016-2183
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-2183
Title: Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

The DES and Triple DES ciphers as used in the TLS SSH and IPSec protocols and other protocols and products have a birthday bound of approximately four billion blocks which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session as demonstrated by an HTTPS session using Triple DES in CBC mode aka a quotSweet32quot attack.