EUVD-2022-1923

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

DefaultHostnameVerifier in Ldaptive fails to validate server hostname, allowing man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: Ldaptive as used in IBM QRadar SIEM is vulnerable to spoofing (CVE-2014-3607)	15 Dec 202017:04	–	ibm
CVE	CVE-2014-3607	8 Jan 201819:00	–	cve
Cvelist	CVE-2014-3607	8 Jan 201819:00	–	cvelist
Debian CVE	CVE-2014-3607	8 Jan 201819:00	–	debiancve
Github Security Blog	Improper Certificate Validation in vt-ldap	14 May 202203:47	–	github
NVD	CVE-2014-3607	8 Jan 201819:29	–	nvd
OSV	DEBIAN-CVE-2014-3607	8 Jan 201819:29	–	osv
OSV	GHSA-273V-G3X4-R3RC Improper Certificate Validation in vt-ldap	14 May 202203:47	–	osv
Prion	Code injection	8 Jan 201819:29	–	prion
UbuntuCve	CVE-2014-3607	8 Jan 201819:29	–	ubuntucve

[
  {
    "enisaIdVendor": [
      {
        "id": "8830e413-5a20-3d0e-9d3d-12253db061d6",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a65f465e-4d96-396c-8529-b25f66fae6c4",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-3607
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
code	www.code.google.com/archive/p/vt-middleware/issues/226
code	www.code.google.com/archive/p/vt-middleware/issues/227
code	www.code.google.com/archive/p/vt-middleware/issues/228
code	www.code.google.com/archive/p/vt-middleware/source/default/commits
code	www.code.google.com/p/vt-middleware/source/detail
shibboleth	www.shibboleth.net/community/advisories/secadv_20140919.txt

03 Oct 2025 20:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 35.9

CVSS 24.3

EPSS0.00867