ID:67 - Exploit for Information disclosure in Cavium products - CVE-2017-17428
Published: March 18, 2020
Nitrox SSL
Nitrox V SSL SDK
TurboSSL SDK
Cavium SDK
Link to public exploit:
Vulnerability description
The vulnerability allows a remote unauthenticated attacker to obtain potentially sensitive information o the target system.
The weakness exists due to improper security restrictions. A remote attacker can use the Bleichenbacher attack to monitor Transport Layer Security (TLS) ciphertext data from the targeted client to the affected server and gain access to potentially sensitive information.