deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8459
Published: 2017-05-03
Description: Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) the display of web-search results
CVSS Score: 5.3 (MEDIUM)
References: https://hackerone.com/reports/175701; https://hackerone.com/reports/175701
CVE: CVE-2017-5236
Published: 2017-05-03
Description: Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://community.rapid7.com/docs/DOC-3631; https://community.rapid7.com/docs/DOC-3631
CVE: CVE-2017-5240
Published: 2017-05-03
Description: Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of service condition when parsed by this component, causing the application to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://community.rapid7.com/docs/DOC-3631; https://community.rapid7.com/docs/DOC-3631
CVE: CVE-2016-0382
Published: 2017-05-03
Description: The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22000590; http://www.securityfocus.com/bid/98301; http://www.ibm.com/support/docview.wss?uid=swg22000590
CVE: CVE-2016-2930
Published: 2017-05-03
Description: IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. IBM X-Force ID: 5512.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg22002331; http://www.securityfocus.com/bid/98304; http://www.ibm.com/support/docview.wss?uid=swg22002331
CVE: CVE-2016-9976
Published: 2017-05-03
Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg22002018; http://www.securityfocus.com/bid/98305; http://www.ibm.com/support/docview.wss?uid=swg22002018
CVE: CVE-2017-7995
Published: 2017-05-03
Description: Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.
CVSS Score: 3.8 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html; http://www.securityfocus.com/bid/98314; https://bugzilla.suse.com/show_bug.cgi?id=1033948
CVE: CVE-2017-5481
Published: 2017-05-03
Description: Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98007; https://success.trendmicro.com/solution/1117204; http://www.securityfocus.com/bid/98007
CVE: CVE-2017-7229
Published: 2017-05-03
Description: PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted message being structured in such a way that most PGP/MIME-capable mail user agents are unable to decrypt it cleanly. The outcome is that encrypted mail passing through this device does not work (Denial of Service), and a common real-world consequence is a request to resend the mail in the clear (Information Disclosure).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-326
References: https://gist.github.com/dkg/a1998c861bf2430e0d01d586905b11cb; https://gist.github.com/dkg/a1998c861bf2430e0d01d586905b11cb
CVE: CVE-2017-6620
Published: 2017-05-03
Description: A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress connection request to the remote management interface. An attacker could exploit this vulnerability by sending a connection to the management IP address or domain name of the targeted device. A successful exploit could allow the attacker to bypass the configured remote management ACL. This can occur when the Remote Management configuration parameter is set to Disabled. This vulnerability affects Cisco CVR100W Wireless-N VPN Routers running a firmware image prior to 1.0.1.24. Cisco Bug IDs: CSCvc14457.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264, CWE-20
References: http://www.securityfocus.com/bid/98289; http://www.securitytracker.com/id/1038395; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cvr100w2
CVE: CVE-2017-6624
Published: 2017-05-03
Description: A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a configuration restriction in the toll-fraud protections component of the affected software. An attacker could exploit this vulnerability to place unauthorized, long-distance phone calls by using an affected system. Cisco Bug IDs: CSCuy40939.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264, CWE-287
References: http://www.securityfocus.com/bid/98283; http://www.securitytracker.com/id/1038398; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme1
CVE: CVE-2017-6625
Published: 2017-05-03
Description: A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow an authenticated, remote attacker to cause an affected system to stop inspecting and processing packets, resulting in a denial of service (DoS) condition. The vulnerability is due to improper SSL policy handling by the affected software when packets are passed through the sensing interfaces of an affected system. An attacker could exploit this vulnerability by sending crafted packets through a targeted system. This vulnerability affects Cisco Firepower System Software that is configured with the SSL policy feature. Cisco Bug IDs: CSCvc84361.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/98292; http://www.securitytracker.com/id/1038397; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ftd
CVE: CVE-2017-6626
Published: 2017-05-03
Description: A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve information from agents using the Finesse Desktop. The vulnerability is due to the existence of a user account that has an undocumented, hard-coded password. An attacker could exploit this vulnerability by using the hard-coded credentials to subscribe to the Finesse Notification Service, which would allow the attacker to receive notifications when an agent signs in or out of the Finesse Desktop, when information about an agent changes, or when an agent's state changes. Cisco Bug IDs: CSCvc08314.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/98291; http://www.securitytracker.com/id/1038396; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-finesse-ucce
CVE: CVE-2017-6628
Published: 2017-05-03
Description: A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition where the WAN optimization could stop functioning while the process restarts. The vulnerability is due to a Secure Sockets Layer/Transport Layer Security (SSL/TLS) alert being incorrectly handled when in a specific SSL/TLS connection state. An attacker could exploit this vulnerability by establishing a SMART-SSL connection through the targeted device. The attacker would then send a crafted stream of SSL/TLS traffic. An exploit could allow the attacker to cause a DoS condition where WAN optimization could stop processing traffic for a short period of time. Cisco Bug IDs: CSCvb71133.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399, CWE-755
References: http://www.securityfocus.com/bid/98294; http://www.securitytracker.com/id/1038399; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-waas
CVE: CVE-2017-6629
Published: 2017-05-03
Description: A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected device. The issue is due to improper sanitization of user-supplied input in HTTP POST parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location. Cisco Bug IDs: CSCvd90118.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/98286; http://www.securitytracker.com/id/1038400; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cuc
CVE: CVE-2017-8762
Published: 2017-05-03
Description: GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/semplon/GeniXCMS/issues/73; https://github.com/semplon/GeniXCMS/issues/73
CVE: CVE-2017-8763
Published: 2017-05-04
Description: Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Telaxus/EPESI/issues/182; https://github.com/Telaxus/EPESI/issues/182
CVE: CVE-2017-8765
Published: 2017-05-04
Description: The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.debian.org/security/2017/dsa-3863; http://www.securityfocus.com/bid/98688; https://github.com/ImageMagick/ImageMagick/issues/466
CVE: CVE-2017-8773
Published: 2017-05-04
Description: Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validation of dwCompressionSize of Microsoft WIM Header WIMHEADER_V1_PACKED. This vulnerability can be exploited to gain Remote Code Execution as well as Privilege Escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://payatu.com/oob-write-heap-buffer-dwcompressionsize-ms-wim/; http://payatu.com/oob-write-heap-buffer-dwcompressionsize-ms-wim/
CVE: CVE-2017-8774
Published: 2017-05-04
Description: Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability/; http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability/
CVE: CVE-2017-8775
Published: 2017-05-04
Description: Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability-2/; http://payatu.com/quick-heal-internet-security-memory-corruption-vulnerability-2/
CVE: CVE-2017-8776
Published: 2017-05-04
Description: Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR/DEP protection mechanisms that provide sufficient defense against directed attacks against the product.
CVSS Score: 7.5 (HIGH)
References: http://payatu.com/quick-heal-antivirus-protection-mechanism-failure-vulnerability/; http://payatu.com/quick-heal-antivirus-protection-mechanism-failure-vulnerability/
CVE: CVE-2017-4983
Published: 2017-05-04
Description: EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system.
CVSS Score: 6.7 (MEDIUM)
References: http://www.securityfocus.com/archive/1/540517/30/0/threaded; http://www.securityfocus.com/bid/98047; http://www.securitytracker.com/id/1038404
CVE: CVE-2017-8295
Published: 2017-05-04
Description: WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a crafted wp-login.php?action=lostpassword request and then arranging for this message to bounce or be resent, leading to transmission of the reset key to a mailbox on an attacker-controlled SMTP server. This is related to problematic use of the SERVER_NAME variable in wp-includes/pluggable.php in conjunction with the PHP mail function. Exploitation is not achievable in all cases because it requires at least one of the following: (1) the attacker can prevent the victim from receiving any e-mail messages for an extended period of time (such as 5 days), (2) the victim's e-mail system sends an autoresponse containing the original message, or (3) the victim manually composes a reply containing the original message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-640
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98295; http://www.securitytracker.com/id/1038403
CVE: CVE-2017-8779
Published: 2017-05-04
Description: rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://openwall.com/lists/oss-security/2017/05/03/12; http://openwall.com/lists/oss-security/2017/05/04/1; http://www.debian.org/security/2017/dsa-3845
CVE: CVE-2017-8780
Published: 2017-05-04
Description: GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/semplon/GeniXCMS/issues/74; https://github.com/semplon/GeniXCMS/issues/74
CVE: CVE-2017-8778
Published: 2017-05-04
Description: GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is an SVG document.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2017/02/15/gitlab-8-dot-16-dot-5-security-release/; https://gitlab.com/gitlab-org/gitlab-ce/issues/27471; https://about.gitlab.com/2017/02/15/gitlab-8-dot-16-dot-5-security-release/
CVE: CVE-2016-7053
Published: 2017-05-04
Description: In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/94244; http://www.securitytracker.com/id/1037261; https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us
CVE: CVE-2016-7054
Published: 2017-05-04
Description: In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94238; http://www.securitytracker.com/id/1037261; https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us
CVE: CVE-2017-3730
Published: 2017-05-04
Description: In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/95812
CVE: CVE-2017-3731
Published: 2017-05-04
Description: If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://rhn.redhat.com/errata/RHSA-2017-0286.html; http://www.debian.org/security/2017/dsa-3773; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html
CVE: CVE-2017-3732
Published: 2017-05-04
Description: There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2017-3733
Published: 2017-05-04
Description: During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/96269
CVE: CVE-2016-7055
Published: 2017-05-04
Description: There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.
CVSS Score: 5.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2017-8768
Published: 2017-05-04
Description: Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID number is SRCTREE-4632.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://openwall.com/lists/oss-security/2017/05/03/5; http://seclists.org/fulldisclosure/2017/May/10; http://www.securityfocus.com/bid/98329
CVE: CVE-2017-8786
Published: 2017-05-05
Description: pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/04/29/libpcre-heap-based-buffer-overflow-write-in-pcre2test-c/; https://bugs.exim.org/show_bug.cgi?id=2079; https://security.gentoo.org/glsa/201710-09
CVE: CVE-2017-3212
Published: 2017-05-05
Description: The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.kb.cert.org/vuls/id/556600; http://www.securityfocus.com/bid/98307; https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data[PII_REDACTED]9f