Lucene search
Kaspersky LabKLA10396HistoryApr 22, 2014 - 12:00 a.m.
KLA10396 SB vulnerability in WinSCP
2014-04-2200:00:00
Kaspersky Lab
threats.kaspersky.com
24
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
38.7%
Detect date:
04/22/2014
Severity:
High
Description:
A lack of hostname verifications was found in the WinSCP. By exploiting this vulnerability malicious users can spoof the SSL server. This vulnerability can be exploited remotely via a man-in-the-middle attack.
Affected products:
WinSCP versions 5.5.2 and earlier
Solution:
Update to latest version
Impacts:
SB
Related products:
CVE-IDS:
CVE-2014-27355.8High
Related
prion
prion
Code injection
2014-04-22 13:06:00
securityvulns
securityvulns
WinSCP proteciton bypass
2014-05-04 00:00:00
CVE-2014-2735 - WinSCP: missing X.509 validation
2014-05-04 00:00:00
cvelist
cvelist
CVE-2014-2735
2014-04-21 14:00:00
cve
cve
CVE-2014-2735
2014-04-22 13:06:00
nessus
nessus
WinSCP Heartbeat Information Disclosure (Heartbleed)
2014-04-18 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
38.7%
Related for KLA10396