Description
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce PayPal Checkout Payment Gateway Parameter Tampering (1.6.8)
WordPress Plugin List Pages Shortcode Cross-Site Scripting (1.7.4)
Jenkins Improper Authentication Vulnerability (CVE-2017-1000354)
WebLogic CVE-2019-2615 Vulnerability (CVE-2019-2615)
WordPress Plugin UserPro-Community and User Profile Privilege Escalation (4.9.27)