For lazy press, spell out MITM

[archaic-openssl.git] / secadv_20140604.txt

diff --git a/secadv_20140604.txt b/secadv_20140604.txt
index 59409bdd463f49709337feb8e2c418d2a325b4bc..50a7b1e4dede700805102b9c092daeef871e0e50 100644 (file)
--- a/secadv_20140604.txt
+++ b/secadv_20140604.txt
@@ -6,8 +6,8 @@ SSL/TLS MITM vulnerability (CVE-2014-0224)
 
 An attacker using a carefully crafted handshake can force the use of weak
 keying material in OpenSSL SSL/TLS clients and servers. This can be exploited
-by a MITM attack where the attacker can decrypt and modify traffic from 
-the attacked client and server.
+by a Man-in-the-middle (MITM) attack where the attacker can decrypt and 
+modify traffic from the attacked client and server.
 
 The attack can only be performed between a vulnerable client *and*
 server. OpenSSL clients are vulnerable in all versions of OpenSSL. Servers