Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7pq-m3xx-w733

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.

EPSS

Процентиль: 30%
0.00111
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 5.4
nvd
почти 8 лет назад

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.

EPSS

Процентиль: 30%
0.00111
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-295