Back to search
CVE-2020-12872
Published: May 15, 2020
Modified: Aug 4, 2024
PUBLISHED
Description
yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://sweet32.info/
x_refsource_MISC
https://github.com/erlyaws/yaws/releases
x_refsource_MISC
https://medium.com/%40charlielabs101/cve-2020-12872-df315411aa70
x_refsource_MISC
https://github.com/erlyaws/yaws/issues/402
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now