ID de Prueba:	1.3.6.1.4.1.25623.1.0.807326
Categoría:	Windows
Título:	Microsoft Windows Cipher Suites For FalseStart MiTM Vulnerability (3155527)
Resumen:	This host is missing a security update; according to Microsoft Security Advisory 3155527
Descripción:	Summary: This host is missing a security update according to Microsoft Security Advisory 3155527 Vulnerability Insight: The flaw exists in FalseStart which allows the TLS client to send application data before receiving and verifying the server Finished message. Vulnerability Impact: Successful exploitation will allow an attacker to launch a man-in-the-middle (MiTM) attack to force the TLS client to encrypt the first flight of application_data records using the attacker's chosen cipher suite from the client's list. Affected Software/OS: - Microsoft Windows 8.1 x32/x64 - Microsoft Windows Server 2012/2012R2 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.