Trend Micro Weak SSL Encryption
Publish Date: 21 lipca 2015
Severity: : Medium
Advisory Date: 21 lipca 2015
DESCRIPTION
Trend has been notified of potential vulnerability in InterScan Web Security products (IWSx) and Advanced Reporting and Management for InterScan Web Security Suite (IWARM).
It is believed to have two impacts in the management console server of products. One is to let unauthorized user decrypt message with weak encryption keys, and the other is to make any network traffic become plain text if it supported the NULL cipher.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.