exploitDog

GHSA-h68j-mvrw-qh9v

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2014-8167
https://access.redhat.com/security/cve/cve-2014-8167
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8167

EPSS

Процентиль: 51%

0.00726

Низкий

CVE ID

Связанные уязвимости

CVE-2014-8167

redhat

больше 12 лет назад

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

CVE-2014-8167

CVSS3: 5.9

nvd

почти 7 лет назад

vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack

EPSS

Процентиль: 51%

0.00726

Низкий

CVE ID