Critical severity9.8NVD Advisory· Published Aug 12, 2021· Updated Jun 17, 2026

CVE-2020-36363

Description

Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Amazon/Amazon Cloudfront
cpe:2.3:a:amazon:amazon_cloudfront:1.2_2019:*:*:*:*:*:*:*
Amazon/AWS CloudFrontdescription
Amazon/CloudFrontllm-fuzzy
Range: TLSv1.2_2019

Patches

Vulnerability mechanics

References

aws.amazon.com/about-aws/whats-new/2020/07/cloudfront-tls-security-policy/nvdVendor Advisory
stackoverflow.com/questions/62071604nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000