Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32r6-gffx-pj25

Опубликовано: 04 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 6.5

Описание

The server certificate was not verified when an Arc agent connected to a Guardian or CMC.

A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive information (such as assets and alerts), impersonation of the server, or injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC.

The server certificate was not verified when an Arc agent connected to a Guardian or CMC.

A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive information (such as assets and alerts), impersonation of the server, or injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC.

EPSS

Процентиль: 9%
0.00031
Низкий

6.3 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 месяца назад

The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive information (such as assets and alerts), impersonation of the server, or injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC.

EPSS

Процентиль: 9%
0.00031
Низкий

6.3 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-295