CVE-2011-3389

CVE-2011-3389, known as the "BEAST" attack, is a vulnerability in the SSL protocol affecting various products including Microsoft Windows, Internet Explorer, Firefox, Chrome, and Opera. It allows man-in-the-middle attackers to decrypt plaintext HTTP headers from HTTPS sessions. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and potential for partial confidentiality compromise. While no active exploitation is confirmed, a Metasploit module exists for SSL/TLS version detection, and it has garnered significant community discussion and media coverage.