Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
virtuozzoVirtuozzoVZA-2017-081
HistorySep 20, 2017 - 12:00 a.m.

Important product update: Virtuozzo PowerPanel RTM Hotfix 3 (7.0.1-415)

2017-09-2000:00:00
help.virtuozzo.com
27

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

The new packages for Virtuozzo PowerPanel introducing new features as well as security and usability fixes.
Vulnerability id: CVE-2014-3566, PP-427
Disabled SSLv3 access to the management panel to protect against the POODLE SSLv3 vulnerability.

OSVersionArchitecturePackageVersionFilename
Virtuozzo PowerPanelanynoarchpython-jsonpatch< 1.2-3.vl7python-jsonpatch-1.2-3.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchpython-prettytable< 0.7.2-2.vl7python-prettytable-0.7.2-2.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchansible< 2.2.1.0-1.vl7.2.1ansible-2.2.1.0-1.vl7.2.1.noarch.rpm
Virtuozzo PowerPanelanynoarchpp-release< 2.0-4.vl7pp-release-2.0-4.vl7.noarch.rpm
Virtuozzo PowerPanelanyx86_64pp-ui< 1.0.74-1.vl7pp-ui-1.0.74-1.vl7.x86_64.rpm
Virtuozzo PowerPanelanynoarchpython-vzapi< 1.0.61-1.vl7python-vzapi-1.0.61-1.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchpython-vzapi-tests< 1.0.61-1.vl7python-vzapi-tests-1.0.61-1.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchvzapi-apache< 1.0.61-1.vl7vzapi-apache-1.0.61-1.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchvzapi-api< 1.0.61-1.vl7vzapi-api-1.0.61-1.vl7.noarch.rpm
Virtuozzo PowerPanelanynoarchvzapi-common< 1.0.61-1.vl7vzapi-common-1.0.61-1.vl7.noarch.rpm
Rows per page:
1-10 of 151

Related

openvas 22
nessus 53
fedora 18
checkpoint_advisories 1
ibm 85
cve 1
mageia 1
debian 2
arista 1
amazon 2
cert 1
veracode 1
cvelist 1
seebug 1
osv 1
citrix 1
redhat 2
f5 1
hackerone 1
suse 1
centos 1
cisco 1
openvas
openvas
Debian Security Advisory DSA 3489-1 (lighttpd - security update)
2016-03-08 00:00:00
Western Digital My Cloud Multiple Products 'POODLE' Vulnerability
2020-09-02 00:00:00
Fedora Update for libuv FEDORA-2014-15379
2014-12-15 00:00:00
nessus
nessus
Solaris 10 (sparc) : 142824-24 (POODLE)
2018-03-12 00:00:00
Rockwell Automation Stratix SSL Padding Oracle On Downgraded Legacy Encryption (CVE-2014-3566)
2023-11-15 00:00:00
SSLv3 Padding Oracle On Downgraded Legacy Encryption in Cisco ASA Software (cisco-sa-20141015-poodle) (POODLE)
2014-10-30 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: claws-mail-3.11.1-2.fc19
2015-01-05 07:36:19
[SECURITY] Fedora 21 Update: claws-mail-plugins-3.11.1-1.fc21
2014-11-10 06:34:14
[SECURITY] Fedora 21 Update: asterisk-11.13.1-1.fc21
2014-11-01 16:38:16
checkpoint_advisories
checkpoint_advisories
Secure Socket Layer (SSL) Version 3.0 (CVE-2014-3566)
2014-10-15 00:00:00
ibm
ibm
Security Bulletin: SSLv3 POODLE Attack (CVE-2014-3566)
2018-06-17 22:32:17
Security Bulletin: Vulnerability in SSLv3 affects InfoSphere BigInsights (CVE-2014-3566)
2021-04-08 20:59:42
Security Bulletin: Vulnerability in SSLv3 affects WorkLight Quality Assurance (CVE-2014-3566)
2018-06-17 22:32:47
cve
cve
CVE-2014-3566
2014-10-15 00:55:02
mageia
mageia
Updated ruby-httpclient package enables SSL negotiation
2014-11-26 20:29:06
debian
debian
[SECURITY] [DLA 282-1] lighttpd security update
2015-07-25 14:29:15
[SECURITY] [DSA 3489-1] lighttpd security update
2016-02-23 18:26:27
arista
arista
Security Advisory 0007
2014-10-20 00:00:00
amazon
amazon
Important: nss
2014-10-16 22:14:00
Important: openssl
2014-10-14 22:32:00
cert
cert
POODLE vulnerability in SSL 3.0
2014-10-17 00:00:00
veracode
veracode
Information Disclosure
2017-02-07 00:05:45
cvelist
cvelist
CVE-2014-3566
2014-10-15 00:00:00
seebug
seebug
SSL 3.0 POODLE（CVE-2014-3566）
2017-02-17 00:00:00
osv
osv
lighttpd - security update
2015-07-25 00:00:00
citrix
citrix
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
2014-10-14 04:00:00
redhat
redhat
(RHSA-2015:1546) Important: node.js security update
2015-08-04 00:00:00
(RHSA-2014:1653) Moderate: openssl security update
2014-10-16 00:00:00
f5
f5
K15702 : SSLv3 vulnerability CVE-2014-3566
2015-09-18 00:00:00
hackerone
hackerone
New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2017-03-26 19:08:23
suse
suse
Security update for suseRegister (important)
2015-01-05 21:04:43
centos
centos
openssl security update
2014-10-16 15:21:39
cisco
cisco
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2014-10-15 18:30:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON
Related for VZA-2017-081
openvas22nessus53fedora18checkpoint_advisories1ibm85cve1mageia1debian2arista1amazon2cert1veracode1cvelist1seebug1osv1citrix1redhat2f51hackerone1suse1centos1cisco1