Lucene search
HistoryOct 07, 2014 - 2:55 p.m.
CVE-2014-7189
cve-2014-7189
go
crypto/tls
vulnerability
nvd
man-in-the-middle
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.
Affected configurations
Node
golanggoMatch1.1
ORgolanggoMatch1.1.1
ORgolanggoMatch1.1.2
ORgolanggoMatch1.2
ORgolanggoMatch1.2.1
ORgolanggoMatch1.2.2
ORgolanggoMatch1.3
ORgolanggoMatch1.3.1
Related
nessus
nessus
Amazon Linux AMI : golang (ALAS-2014-437)
2014-11-03 00:00:00
Fedora 20 : golang-1.3.3-1.fc20 (2014-12077)
2014-10-12 00:00:00
Fedora 21 : golang-1.3.3-1.fc21 (2014-14130)
2014-11-11 00:00:00
amazon
amazon
Medium: golang
2014-10-28 17:15:00
veracode
veracode
Man-in-the-Middle (MitM)
2017-05-03 05:22:07
openvas
openvas
Fedora Update for golang FEDORA-2014-12077
2014-10-12 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-437)
2015-09-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0410)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: golang-1.3.3-1.fc20
2014-10-11 06:59:56
[SECURITY] Fedora 21 Update: golang-1.3.3-1.fc21
2014-11-10 06:42:16
[SECURITY] Fedora 19 Update: golang-1.3.3-1.fc19
2014-10-11 07:03:24
osv
osv
Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls
2022-05-25 21:11:41
nvd
nvd
CVE-2014-7189
2014-10-07 14:55:07
ubuntucve
ubuntucve
CVE-2014-7189
2014-10-07 00:00:00
mageia
mageia
Updated golang packages fix CVE-2014-7189
2014-10-09 18:39:32
cvelist
cvelist
CVE-2014-7189
2014-10-07 14:00:00
prion
prion
Design/Logic Flaw
2014-10-07 14:55:00
ibm
ibm
WebSphere Application Server and IBM HTTP Server Security Bulletin List
2022-07-13 18:04:48
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.6%
Related for CVE-2014-7189