CVE-2015-7824

botan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data via a padding-oracle attack against TLS CBC ciphersuites.

• CWE-200

• https://botan.randombit.net/security.html#id3Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1311613Issue Tracking, Third Party Advisory, VDB Entry
• https://botan.randombit.net/security.html#id3Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1311613Issue Tracking, Third Party Advisory, VDB Entry

Published

Apr 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7817Race condition in the administration-panel web service in IB…
• CVE-2015-7818The administration-panel web service in IBM System Networkin…
• CVE-2015-7819The DB service in IBM System Networking Switch Center (SNSC)…
• CVE-2015-7820Race condition in the administration-panel web service in IB…
• CVE-2015-7822Multiple cross-site scripting (XSS) vulnerabilities in Kenti…
• CVE-2015-7823Open redirect vulnerability in CMSPages/GetDocLink.ashx in K…
• CVE-2015-7825botan before 1.11.22 improperly validates certificate paths,…
• CVE-2015-7826botan 1.11.x before 1.11.22 improperly handles wildcard matc…
• CVE-2015-7827Botan before 1.10.13 and 1.11.x before 1.11.22 make it easie…
• CVE-2015-7828SAP HANA Database 1.00 SPS10 and earlier do not require auth…
• CVE-2015-7829Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before…
• CVE-2015-7830The pcapng_read_if_descr_block function in wiretap/pcapng.c …