Description
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
Remediation
References
Related Vulnerabilities
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-22797)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.6)
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268)
Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2022-2191)