CVEs-PoC/2020/CVE-2020-12872.md

CVE-2020-12872

Description

yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0.

POC

Reference

• https://medium.com/%40charlielabs101/cve-2020-12872-df315411aa70
• https://medium.com/@charlielabs101/cve-2020-12872-df315411aa70
• https://sweet32.info/

Github

• https://github.com/BroDaber/kitcat
• https://github.com/Live-Hack-CVE/CVE-2020-12872
• https://github.com/Nissiuser/Vulnerability-Scan-Report
• https://github.com/Officerwasu/Elevate-Labs-Task-3
• https://github.com/catsploit/catsploit