Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3E8801268238D4C87FC403133451AF66HistoryOct 24, 2014 - 12:00 a.m.
Cryptographic Issues
2014-10-2400:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
42.3%
Certificates.java in Not Yet Commons SSL does not properly verify that the server hostname matches a domain name in the subject’s Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected configurations
Node
mavennot-yet-commons-sslRange≤0.3.13
| CPE | Name | Operator | Version |
|---|---|---|---|
| maven/ca.juliusdavies/not-yet-commons-ssl | le | 0.3.13 |
References
Related
prion
prion
Design/Logic Flaw
2014-10-25 00:55:00
nessus
nessus
Fedora 21 : not-yet-commons-ssl-0.3.15-2.fc21 (2014-10691)
2014-09-23 00:00:00
Fedora 19 : not-yet-commons-ssl-0.3.15-2.fc19 (2014-10746)
2014-09-26 00:00:00
Fedora 20 : not-yet-commons-ssl-0.3.15-2.fc20 (2014-10729)
2014-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: not-yet-commons-ssl-0.3.15-2.fc20
2014-09-25 10:32:42
[SECURITY] Fedora 21 Update: not-yet-commons-ssl-0.3.15-2.fc21
2014-09-23 05:10:13
[SECURITY] Fedora 19 Update: not-yet-commons-ssl-0.3.15-2.fc19
2014-09-25 10:37:48
debiancve
debiancve
CVE-2014-3604
2014-10-25 00:55:00
openvas
openvas
Fedora Update for not-yet-commons-ssl FEDORA-2014-10746
2014-10-01 00:00:00
Fedora Update for not-yet-commons-ssl FEDORA-2014-10729
2014-10-01 00:00:00
Mageia: Security Advisory (MGASA-2014-0551)
2022-01-28 00:00:00
github
github
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
securityvulns
securityvulns
Not Yet Commons SSL certificate spoofing
2015-04-19 00:00:00
[ MDVSA-2015:141 ] not-yet-commons-ssl
2015-04-19 00:00:00
cvelist
cvelist
CVE-2014-3604
2014-10-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-3604
2014-10-25 00:00:00
cve
cve
CVE-2014-3604
2014-10-25 00:55:03
nvd
nvd
CVE-2014-3604
2014-10-25 00:55:03
mageia
mageia
Updated not-yet-commons-ssl packages fix CVE-2014-3604
2014-12-26 20:04:58
osv
osv
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
2022-05-14 03:59:54
redhat
redhat
(RHSA-2015:1888) Important: Red Hat JBoss SOA Platform 5.3.1 security update
2015-10-12 15:22:52
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
42.3%
Related for GITLAB-3E8801268238D4C87FC403133451AF66