"BEAST attack" for WebALARM

"BEAST attack" for WebALARM

Question:
Does WebALARM have the vulnerability of "BEAST attack"?

Answer:
WebALARM is not vulnerable to BEAST attack, because the attack requires a man-in-the-middle access and WebALARM Agent requires client certification authentication from WAC.
Without a valid WAC certificate, WAA does not grant connection access at all.

More Information:
N/A