CVE-2013-5143

Опубликовано: 24 окт. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified circumstances, which might allow man-in-the-middle attackers to hijack RADIUS sessions by leveraging knowledge of the private key that matches this fallback certificate.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:os_x_server:*:*:*:*:*:*:*:*

Версия до 2.2.2 (включая)

cpe:2.3:o:apple:os_x_server:2.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:os_x_server:2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:os_x_server:2.1.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:os_x_server:2.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:os_x_server:2.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00188

Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-vx62-2fm4-r5vw

github

больше 3 лет назад