Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle HTTP Server Inadequate Encryption Strength Vulnerability - CVE-2013-2566 - Vulnerability Database
Oracle HTTP Server

Oracle HTTP Server Inadequate Encryption Strength Vulnerability - CVE-2013-2566

Medium
Reference: CVE-2013-2566
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-2566
Title: Oracle HTTP Server Inadequate Encryption Strength Vulnerability
Overview:

The RC4 algorithm as used in the TLS protocol and SSL protocol has many single-byte biases which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.