CVE-2013-4488

Опубликовано: 10 окт. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

Конфигурация 1

cpe:2.3:a:libgadu:libgadu:*:*:*:*:*:*:*:*

Версия до 1.11.4 (включая)

EPSS

Процентиль: 58%

0.00966

Низкий

4.3 Medium

CVSS2

CWE-310

CVE-2013-4488

ubuntu

почти 12 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

redhat

около 13 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

debian

почти 12 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL serv ...

GHSA-42c4-xg6q-8r33

github

около 4 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

EPSS

Процентиль: 58%

0.00966

Низкий

4.3 Medium

CVSS2

CWE-310