MSXML SSL 2.0 Information Disclosure Vulnerability

CVE-2015-2434 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2471.

Learn more about our Network Penetration Testing.