An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attack due to the selection of a less-secure algorithm during negotiation.
Weakness
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Caterease | Horizoncloud | 16.0.1.1663 (including) | 24.0.1.2405 (including) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/220.html
- https://cwe.mitre.org/data/definitions/606.html
- https://cwe.mitre.org/data/definitions/620.html