medium4.3
CVE-2013-6169
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive informatio…
Impact
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Process-One | Ejabberd | through 2.1.12 Versions 0.9, 0.9.1, 0.9.8, 1.0.0, 1.1.0 |