Glassfish Communications Server
1 CVEs
product
Monthly
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Mozilla
Information Disclosure
Network Security Services
Ubuntu Linux
Enterprise Manager Ops Center
+12
NVD
CVSS 2.0
4.3
EPSS
0.9%
EPSS 1%
CVSS 4.3
MEDIUM
This Month
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Mozilla
Information Disclosure
Network Security Services
+14
NVD