Lucene search

[email protected]CVE-2010-4832

HistoryMay 14, 2014 - 12:55 a.m.

CVE-2010-4832

2014-05-1400:55:02

CWE-310

[email protected]

web.nvd.nist.gov

android os

ssl certificate

cve-2010-4832

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.9%

JSON

Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sources in which (1) the certificate of the last loaded resource is checked, instead of for the main page, or (2) later certificates are not checked when the HTTPS connection is reused.

Affected configurations

NVD

Node

googleandroidRange≤2.1

googleandroidMatch1.0

googleandroidMatch1.1

googleandroidMatch1.5

googleandroidMatch1.6

googleandroidMatch2.0

googleandroidMatch2.0.1

CPENameOperatorVersion
google:androidgoogle androidle2.1
google:androidgoogle androideq1.0
google:androidgoogle androideq1.1
google:androidgoogle androideq1.5
google:androidgoogle androideq1.6
google:androidgoogle androideq2.0
google:androidgoogle androideq2.0.1

CPE	Name	Operator	Version
google:android	google android	le	2.1
google:android	google android	eq	1.0
google:android	google android	eq	1.1
google:android	google android	eq	1.5
google:android	google android	eq	1.6
google:android	google android	eq	2.0
google:android	google android	eq	2.0.1

References

android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=dba8cb76371960457e91b31fa396478f809a5a34

jvn.jp/en/jp/JVN43105011/index.html

jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000053.html

gitorious.org/atrix-aosp/frameworks_base/commit/dba8cb76371960457e91b31fa396478f809a5a34

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for CVE-2010-4832

prion1 nvd1 jvn1 cvelist1