CVE-2013-6807

The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:opentext:exceed_ondemand:8.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-05-19 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2013-6807

Mitre link : CVE-2013-6807

CVE.ORG link : CVE-2013-6807


JSON object : View

Products Affected

opentext

  • exceed_ondemand
CWE
CWE-310

Cryptographic Issues