HexBrain

HackerOne · Report #225754

Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com

Validstatus
19upvotes
21 Jun 2017disclosed

How it was found

Hello,

I just found some minor issue with RSA 2048 bits (SHA1withRSA) in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com thru Qualys SSL Labs and wanted to report it.

Proof of Concept

https://www.ssllabs.com/ssltest/analyze.html?d=b5s.hackerone-ext-content.com Result: SHA1withRSA INSECURE https://www.ssllabs.com/ssltest/analyze.html?d=a4l.hackerone-ext-content.com Result: SHA1withRSA INSECURE

I hope you will fix this issue.

Cheers, Evan

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original