CWE-757: Algorithm Downgrade
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
Also known as Selection of Less-Secure Algorithm During Negotiation.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- rustls rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHello 6.3 Medium
- mediatek, inc. mediatek chipset In Modem, there is a possible information disclosure due to side channel information disclosure.... 5.3 Medium
- amazon amazon.extensions.s3.encryption RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET 6.0 Medium
-
rustlscrates.io rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share 3.7 Low - freerdp FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response 6.0 Medium
- asynchttpclient async-http-client AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int 8.8 High
- asynchttpclient async-http-client AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext 8.7 High
- apache software foundation plc4x Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade 9.2 Critical
- howyar weenygenius Howyar｜WeenyGenius - Use of Insecure Protocol 8.7 High
- spring integration, vmware spring integration +1 more SMB minimum protocol dialect defaults to SMB1 6.6 Medium
-
libnet-oauth-perlDebian,perl-Net-OAuthMageia +1 more Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify 9.8 Critical -
libnet-oauth-perlDebian,perl-Net-OAuthMageia +1 more Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token 9.8 Critical - mongodb, mongodb server, mongodb, inc. mongodb server +2 more Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure 9.0 Critical
- erlang otp, erlang\/otp, erlang\/ssl +2 more TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical
- ibm i IBM i is Affected by Algorithm Downgrade in Transport Layer Security [] 5.9 Medium
- better-auth better-auth before 1.6.11 Insecure Cryptographic Defaults via oidcProvider 9.4 Critical
- pgjdbc, postgresql jdbc driver +1 more Silent channel-binding authentication downgrade via unsupported certificate algorithms 8.2 High
- ongres scram SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms 8.2 High
- wolfssl Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured 2.1 Low
- corewcf CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass 3.7 Low
- sensiolabs symfony, symfony mailomat-mailer +1 more Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade 6.3 Medium
- zephyrproject zephyr net: TLS 1.2 connections allowed on TLS 1.3 sockets 5.3 Medium
- aws encryption sdk for python Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python 5.7 Medium
- anviz crosschex standard Anviz CrossChex Standard Algorithm Downgrade 7.5 High
- openssl, siemens simatic cn 4100, simatic cn 4100 firmware +2 more OpenSSL TLS 1.3 server may choose unexpected key agreement group 6.5 Medium
- silabs.com silicon labs z-wave sdk Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure 7.6 High
- pspete pspas psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse 2.3 Low
- dell networker Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm... 4.8 Medium
- simple sa simple.erp Protocol Downgrade in SIMPLE.ERP 8.3 High
- apple ipados, macos, visionos +2 more +4 more An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS... 9.1 Critical
- asseco business solutions s.a. wapro erp desktop Protocol Downgrade in Wapro ERP Desktop 9.1 Critical
- horizoncloud caterease An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly... 9.1 Critical
- mediatek mt6833, mt6853, mt6855 +15 more +17 more In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a... 6.5 Medium
- dexidp dex Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers 7.5 High
- ibm security directory suite, security directory suite va +1 more IBM Security Directory Suite information disclosure 3.7 Low
- red hat build of quarkus 2.13.8.final, redhat build of quarkus +1 more Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol 6.5 Medium
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +7 more +9 more Weak Default SSL use in Port Forwarding Service 7.3 High
- silicon labs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 more The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure... 8.1 High
- dell emc streaming data platform Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the... 6.5 Medium
- philips clinical collaboration platform Philips Clinical Collaboration Platform Algorithm Downgrade 6.5 Medium
- bluetooth core, br/edr, opensuse leap +2 more Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks 5.4 Medium
- red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 more Inadequate Encryption Strength and Algorithm Downgrade in Wildfly 7.4 High
- postfix-mta-sts-resolver project postfix-mta-sts-resolver downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver 6.9 Medium
- edirectory eDirectory LDAP peer certificate validation issue 6.5 Medium
- opensuse libzypp lack of keypinning in libzypp could lead to repository switching 7.7 High