Логотип exploitDog
bind:CVE-2020-14387
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-14387

Количество 7

Количество 7

ubuntu логотип

CVE-2020-14387

больше 4 лет назад

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2020-14387

больше 5 лет назад

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2020-14387

больше 4 лет назад

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 7.4
EPSS: Низкий
msrc логотип

CVE-2020-14387

около 4 лет назад

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2020-14387

больше 4 лет назад

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperl ...

CVSS3: 7.4
EPSS: Низкий
github логотип

GHSA-5gm2-c485-9q6q

больше 3 лет назад

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

EPSS: Низкий
suse-cvrf логотип

SUSE-RU-2023:3370-1

больше 2 лет назад

Recommended update for rsync

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-14387

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 7.4
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2020-14387

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 9.1
0%
Низкий
больше 5 лет назад
nvd логотип
CVE-2020-14387

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

CVSS3: 7.4
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 7.4
0%
Низкий
около 4 лет назад
debian логотип
CVE-2020-14387

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperl ...

CVSS3: 7.4
0%
Низкий
больше 4 лет назад
github логотип
GHSA-5gm2-c485-9q6q

A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4.

0%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-RU-2023:3370-1

Recommended update for rsync

больше 2 лет назад

Уязвимостей на страницу