Lucene search

K
cvelistDellCVELIST:CVE-2013-0945
HistoryMay 03, 2013 - 10:00 a.m.

CVE-2013-0945

2013-05-0310:00:00
dell
www.cve.org
2
emc avamar client
ssl server spoofing
x.509 certificate

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.3%

EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject’s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.3%

Related for CVELIST:CVE-2013-0945