CVE-2010-2306 - CERT CVE
ID CVE-2010-2306
Sažetak The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
Reference
CVSS
Base: 4.3
Impact: 4.9
Exploitability:5.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:A/AC:M/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 10-10-2018 - 19:59
Objavljeno 16-06-2010 - 20:30