PT-2014-3731 · Emc · Emc Rsa Bsafe Micro Edition Suite

Publicado 2014-04-11 · Atualizado 2021-12-09 · CVE-2014-0636

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite (MES) versions 3.2.x through 3.2.5 EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x through 4.0.4

Description The issue is related to the improper validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.

Recommendations For versions 3.2.x through 3.2.5, update to version 3.2.6 or later. For versions 4.0.x through 4.0.4, update to version 4.0.5 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-0636

Produtos afetados

Emc Rsa Bsafe Micro Edition Suite

Referências · 4

• https://t.me/cvenotify/24472 · Publicação no Telegram
• http://securityfocus.com/bid/66791 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0636 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2014-04/0069.html · Nota