RSA PKCS#1 Decryption Attack Vulnerable Handshake

Strike ID:
E17-6v3a1
CVSS:
5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)
False Positive:
f
Variants:
7
Year:
2017

Description

This strike emulates a TLS handshake using an RSA Encrypted PreMaster Secret, which may be vulnerable to the Return Of Bleichenbacher's Oracle Threat (ROBOT) decryption attack. Due to incorrect handling of improperly padded or invalid RSA Encrypted PreMaster Secrets, information which may be used to decrypt or decipher the server's private key is leaked. Successful exploitation may result in decryption of encrypted communications or may allow the attacker to sign cryptographically sign messages with the server's private key. This strike only emulates a vulnerable handshake and does not emulate an attack. TLS_RSA ciphers have not been deprecated for TLS 1.1 or 1.2, but is deprecated for TLS 1.3. The researchers who have discovered the vulnerability recommend disabling TLS_RSA ciphers.

References