CVE-2020-14254

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2

published December 16, 2020

CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively record traffic and later decrypt it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00647 · 50.4th percentile
Published
2020-12-16T14:07Z
EPSS history
Timeline
  • 16 DEC 14:07Z
    TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2
    cvelistv5