地图 / Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com

Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com

密码学缺陷 / Use of a Broken or Risky Cryptographic Algorithm / #225754

厂商: HackerOne
严重程度: 未评级
赏金: —
弱点: Use of a Broken or Risky Cryptographic Algorithm
研究员: @evanricafort
披露日期: 2017-06-21
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（466 字符中的一小部分）

I just found some minor issue with RSA 2048 bits (SHA1withRSA) in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com thru Qualys SSL Labs and wanted to report it.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。

时间线

2017-05-03报告提交
2017-06-21公开披露

阅读 HackerOne 原文 ↗作者 @evanricafort · 版权归作者与 HackerOne 所有

同类报告

0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)Mars · 2024-07-11 iOS group chat denial of serviceLY Corporation · 2023-03-29 · $300 Invisible Salamanders Attack against end_to_end_encryption in NextcloudNextcloud · 2024-12-03 Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.comNextcloud · 2024-05-22 Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness)curl · 2025-07-10 Use of a Broken or Risky Cryptographic Algorithm (CWE-327) in libcurlcurl · 2025-04-29