blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)
该报告还没有中文解读。
原文摘录
摘自原文(2180 字符中的一小部分)
**Descriptions** Cryptographic protocols like TLS, SSH, IPsec, and OpenVPN commonly use block cipher algorithms, such as AES, Triple-DES, and Blowfish, to encrypt data between clients and servers. To use such algorithms, the data is broken into fixed-length chunks, called blocks, and each block is …
原文中的代码
443/tcp open https | ssl-enum-ciphers: | TLSv1.0: | ciphers: | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A | …
默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Hiro 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @0x1_aulia · 版权归作者与 Hiro 所有