Government of the Republic of Trinidad and Tobago
gov.tt

TTCSIRT-073.121417: TT-CSIRT Advisory – TLS Security Updates

TTCSIRT-073.121417: TT-CSIRT Advisory – TLS Security Updates

CERT Coordination Center (CERT/CC) has released information on a Transport Layer Security (TLS) vulnerability. Exploitation of this vulnerability could allow an attacker to access sensitive information.

The TLS vulnerability is also known as Return of Bleichenbacher’s Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to decrypt TLS traffic under certain conditions.

Further information on this vulnerability and how it can be fixed can be found at http://www.kb.cert.org/vuls/id/144389