N/A

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish multiple millions of crafted SSL connections to the target and obtain the session keys required to decrypt the pre-recorded SSL session.

N/A

N/A

Symantec SSL Visibility 加密问题漏洞

Symantec SSL Visibility（SSLV）是美国赛门铁克（Symantec）公司的一款网站加密流量监控应用程序。该程序具有自动识别SSL/TLS流量、SSL绕过检测和解密SSL流量等功能。 Symantec SSLV中存在加密问题漏洞。远程攻击者可通过向目标建立多个特制的SSL连接利用该漏洞获取会话密钥。以下版本受到影响：Symantec SSL Visibility 3.8.4FC版本，3.10.4.1之前的3.10版本，3.11版本，3.12.2.1之前的3.12版本。

N/A

N/A