The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2013-10-17T23:00:00Z
Updated: 2024-09-16T19:36:22.414Z
Reserved: 2013-10-17T00:00:00Z
Link: CVE-2013-6169
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-10-17T23:55:04.707
Modified: 2024-11-21T01:58:46.147
Link: CVE-2013-6169
Redhat
No data.