Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2014-3607
HistoryJan 08, 2018 - 7:00 p.m.

CVE-2014-3607

2018-01-0819:00:00
redhat
www.cve.org
3

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

46.1%

JSON

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject’s Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Related

ubuntucve 1
debiancve 1
osv 1
github 1
prion 1
ibm 1
veracode 1
cve 1
nvd 1
ubuntucve
ubuntucve
CVE-2014-3607
2018-01-08 00:00:00
debiancve
debiancve
CVE-2014-3607
2018-01-08 19:29:00
osv
osv
Improper Certificate Validation in vt-ldap
2022-05-14 03:47:38
github
github
Improper Certificate Validation in vt-ldap
2022-05-14 03:47:38
prion
prion
Code injection
2018-01-08 19:29:00
ibm
ibm
Security Bulletin: Ldaptive as used in IBM QRadar SIEM is vulnerable to spoofing (CVE-2014-3607)
2020-12-15 17:04:31
veracode
veracode
Certificate Spoofing
2018-11-20 08:55:54
cve
cve
CVE-2014-3607
2018-01-08 19:29:00
nvd
nvd
CVE-2014-3607
2018-01-08 19:29:00

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

46.1%

JSON
Related for CVELIST:CVE-2014-3607
ubuntucve1debiancve1osv1github1prion1ibm1veracode1cve1nvd1