{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1600 Weaken Encryption","home_page_url":"https://patchfirst.co/technique/T1600/","feed_url":"https://patchfirst.co/feed/technique/T1600.json","description":"New and newly exploited CVEs that lead to ATT&CK T1600 Weaken Encryption, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2018-11069","url":"https://patchfirst.co/cve/CVE-2018-11069/","title":"CVE-2018-11069: RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also…","content_text":"Dell EMC · RSA BSAFE SSL-J. Not in CISA KEV. EPSS 1.3% (higher than 70% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1110 Brute Force; T1600 Weaken Encryption. Priority 18.1 of 100.","summary":"RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also…","date_published":"2018-09-11T00:00:00.000Z","date_modified":"2024-09-16T19:35:24.000Z","tags":["T1110","T1600"],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.01278,"percentile":0.69962},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.0"},"vendor":"Dell EMC","product":"RSA BSAFE SSL-J","techniqueIds":["T1110","T1600"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}