CWE-757.

In Modem, there is a possible information disclosure due to side channel information disclosure.

• MediaTek, Inc. MediaTek chipset
• CWE-757

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

• CWE-757

<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

• Amazon.Extensions.S3.Encryption
• CWE-204
• CWE-757

FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response

• FreeRDP
• CWE-757

AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext

• Weak cryptography or TLS
• Hard-coded credentials

>=3.0.0.Beta1, <3.0.13 || >=2.0.0, <2.16.1 · fixed in 3.0.13, 2.16.1

AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int

• AsyncHttpClient async-http-client
• Authentication bypass
• CWE-757

Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade

• Apache Software Foundation Apache PLC4X
• Weak cryptography or TLS
• CWE-757

Howyar｜WeenyGenius - Use of Insecure Protocol

• Howyar WeenyGenius
• CWE-757

SMB minimum protocol dialect defaults to SMB1

• Spring Integration
• CWE-757

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify

• Weak cryptography or TLS
• CWE-757

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

• CWE-757

Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure

• MongoDB Server
• CWE-757

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

• Erlang OTP
• CWE-757

PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms

• CWE-636
• CWE-757

>=42.7.4, <42.7.12 · fixed in 42.7.12

IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

• i
• CWE-757

Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default

• Weak cryptography or TLS
• CWE-757

<1.6.11 · fixed in 1.6.11

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

• CWE-636
• CWE-757

<3.3 · fixed in 3.3

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

• wolfSSL
• CWE-757

CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass

• Weak cryptography or TLS
• CWE-757

<1.8.1 || >=1.9.0, <1.9.1 · fixed in 1.8.1, 1.9.1

Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade

• Weak cryptography or TLS
• CWE-757

>=7.2.0, <7.4.13 || >=8.0.0, <8.0.13 · fixed in 7.4.13, 8.0.13

net: TLS 1.2 connections allowed on TLS 1.3 sockets

• Zephyr
• CWE-757

AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache

• CWE-757

>=2.0.0, <3.3.1 || >=4.0.0, <4.0.5 · fixed in 3.3.1, 4.0.5

Anviz CrossChex Standard Algorithm Downgrade

• Anviz CrossChex Standard
• CWE-757

OpenSSL TLS 1.3 server may choose unexpected key agreement group

• OpenSSL
• CWE-757

Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure

• silabs.com Silicon Labs Z-Wave SDK
• CWE-757

psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse

• pspete psPAS
• CWE-757

Dell NetWorker: Dell NetWorker, versions 19.12.0.1 and prior…

• Dell NetWorker
• CWE-757

Protocol Downgrade in SIMPLE.ERP

• Simple SA SIMPLE.ERP
• CWE-757

An out-of-bounds write was addressed with improved input validation.

• Apple iOS and iPadOS
• Apple macOS
• CWE-757

Protocol Downgrade in Wapro ERP Desktop

• Asseco Business Solutions S.A. Wapro ERP Desktop
• Information disclosure
• CWE-757

An issue in Horizon Business Services Inc.

• CWE-757

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check.

• MediaTek, Inc. MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8675, MT8771, MT8791T, MT8797
• CWE-757

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

• Weak cryptography or TLS
• CWE-757

<0.0.0-20240125115555-5bbdb4420254 || >=2.37.0, <2.38.0 · fixed in 0.0.0-20240125115555-5bbdb4420254, 2.38.0

IBM Security Directory Suite information disclosure

• IBM Security Directory Suite
• CWE-757

quarkus-core vulnerable to client driven TLS cipher downgrading

• CWE-757

<2.16.8.Final · fixed in 2.16.8.Final

Weak Default SSL use in Port Forwarding Service

• Western Digital My Cloud
• CWE-757

Silicon Labs Z-Wave: The Z-Wave specification requires that S2 security can be downgraded to S0 or other less…

• Silicon Labs Z-Wave
• CWE-757

Dell EMC Streaming Data Platform: Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip…

• Dell EMC Streaming Data Platform
• CWE-757

Philips Clinical Collaboration Platform Algorithm Downgrade

• Philips Clinical Collaboration Platform
• CWE-757

Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks

• Bluetooth BR/EDR
• CWE-757

Red Hat wildfly: A flaw was found when an OpenSSL security provider is used with Wildfly…

• Red Hat wildfly
• CWE-757

postfix-mta-sts-resolver Algorithm Downgrade vulnerability

• CWE-757

<0.5.1 · fixed in 0.5.1

eDirectory LDAP peer certificate validation issue

• Novell eDirectory
• CWE-757

lack of keypinning in libzypp could lead to repository switching

• SUSE libzypp
• CWE-757