Weakness (CWE)

CWE-757: Algorithm Downgrade

Class Incomplete Selection of Less-Secure Algorithm During Negotiation

A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

Source: MITRE CWE-757

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.