Security Advisory
CVE-2013-6807
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.