Описание
Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:velneo:vclient:28.1.3:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00133
Низкий
6.3 Medium
CVSS3
5.9 Medium
CVSS3
Дефекты
CWE-287
CWE-295
Связанные уязвимости
CVSS3: 5.9
github
больше 3 лет назад
Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.
EPSS
Процентиль: 34%
0.00133
Низкий
6.3 Medium
CVSS3
5.9 Medium
CVSS3
Дефекты
CWE-287
CWE-295