Glassfish Communications Server
1 CVEs
product
Monthly
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Oracle
Red Hat
Mozilla
Canonical
+15
NVD
CVSS 2.0
4.3
EPSS
0.9%
EPSS 1%
CVSS 4.3
MEDIUM
This Month
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Oracle
Red Hat
+17
NVD