Back to search
CVE-2021-27756
Published: Mar 4, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it."
| Vendor | Product | Versions |
|---|---|---|
n/a | "BigFix Compliance Server" | affected "BigFix Compliance Server 2.0 - 2.0.5" |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now