CVE-2013-4488

Опубликовано: 10 окт. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

Конфигурация 1

cpe:2.3:a:libgadu:libgadu:*:*:*:*:*:*:*:*

Версия до 1.11.4 (включая)

EPSS

Процентиль: 55%

0.0032

Низкий

4.3 Medium

CVSS2

CWE-310

CVE-2013-4488

ubuntu

больше 11 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

redhat

больше 12 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

CVE-2013-4488

debian

больше 11 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL serv ...

GHSA-42c4-xg6q-8r33

github

больше 3 лет назад

libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.

EPSS

Процентиль: 55%

0.0032

Низкий

4.3 Medium

CVSS2

CWE-310