Expired SSL Certificate allows credentials steal

Disclosed: 2021-11-29 22:06:47 By dmonsterrr To deptofdefense
Medium
Vulnerability Details
Hi security Team! I've found this website with no valid SSL Certificate. https://██████████ Certificate has expired 314 days ago. ## Impact Error message can appear on page and **user can have his credentials stolen by an attacker capturing the network data.** ## System Host(s) ███████ ## Affected Product(s) and Version(s) ## CVE Numbers ## Steps to Reproduce Visit: https://██████████ and check the SSL Certificate. It was expired in november 2020. ## Suggested Mitigation/Remediation Actions
Actions
View on HackerOne
Report Stats
  • Report ID: 1344951
  • State: Closed
  • Substate: resolved
  • Upvotes: 15
Share this report