Lucene search

K
cve[email protected]CVE-2014-2783
HistoryJul 08, 2014 - 10:55 p.m.

CVE-2014-2783

2014-07-0822:55:06
CWE-264
web.nvd.nist.gov
31
cve-2014-2783
microsoft
internet explorer
ev
ssl
wildcard certificate
security vulnerability

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.6%

Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka “Extended Validation (EV) Certificate Security Feature Bypass Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9
OR
microsoftinternet_explorerMatch10
OR
microsoftinternet_explorerMatch11-

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.6%