HexBrain

RelateIQ · Report #30852

Relateiq SSLv3 deprecated protocol vulnerability.

Validstatus
3upvotes
24 Dec 2014disclosed

How it was found

Relateiq Website service encrypts traffic using an old deprecated protocol with known weakness wich is obsolete and insecure, you should disable it.

POC in the attachments.

https://foundeo.com/products/iis-weak-ssl-ciphers/test.cfm?test_domain=www.relateiq.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original