Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Python Inadequate Encryption Strength Vulnerability - CVE-2014-0224 - Vulnerability Database
Python

Python Inadequate Encryption Strength Vulnerability - CVE-2014-0224

High
Reference: CVE-2014-0224
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-0224
Title: Python Inadequate Encryption Strength Vulnerability
Overview:

OpenSSL before 0.9.8za 1.0.0 before 1.0.0m and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications and consequently hijack sessions or obtain sensitive information via a crafted TLS handshake aka the quotCCS Injectionquot vulnerability.