CVE-2014-3051

Опубликовано: 29 окт. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.3.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00143

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-7w3q-ccq4-qq6w

github

больше 3 лет назад