CVE

CVE-2016-2850 (botan)

CVE-2016-2850 (botan)

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Source: CVE-2016-2850 (botan)

Exit mobile version