CVE-2017-18268

Published: May 17, 2018Modified: Nov 21, 2024

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session.

Affected (1)

Products: Broadcom: Symantec Intelligencecenter

1 product

Symantec Intelligencecenter

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Broadcom Symantec Intelligencecenter	Version 3.3

Related CWEs

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (4)

http://www.securityfocus.com/bid/104164

Source: secure@symantec.com

Third Party AdvisoryVDB Entry

https://www.symantec.com/security-center/network-protection-security-advisories/SA160

Source: secure@symantec.com

Vendor Advisory

http://www.securityfocus.com/bid/104164

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.symantec.com/security-center/network-protection-security-advisories/SA160

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.