Lucene search
Gentoo FoundationMGASA-2014-0348HistoryAug 25, 2014 - 12:44 p.m.
Updated Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities
2014-08-2512:44:11
Gentoo Foundation
advisories.mageia.org
12
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
74.4%
Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities: The Jakarta Commons HttpClient component may be susceptible to a ‘Man in the Middle Attack’ due to a flaw in the default hostname verification during SSL/TLS when a specially crafted server side certificate is used (CVE-2012-6153). The Apache httpcomponents HttpClient component may be susceptible to a ‘Man in the Middle Attack’ due to a flaw in the default hostname verification during SSL/TLS when a specially crafted server side certificate is used (CVE-2014-3577).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | jakarta-commons-httpclient | < 3.1-11.1 | jakarta-commons-httpclient-3.1-11.1.mga4 |
| Mageia | 4 | noarch | httpcomponents-client | < 4.3.5-1 | httpcomponents-client-4.3.5-1.mga4 |
Related
ibm
ibm
openvas
openvas
RedHat Update for jakarta-commons-httpclient RHSA-2014:1166-01
2014-09-09 00:00:00
CentOS Update for jakarta-commons-httpclient CESA-2014:1166 centos7
2014-09-10 00:00:00
CentOS Update for httpcomponents-client CESA-2014:1146 centos7
2014-09-10 00:00:00
redhat
redhat
(RHSA-2014:1891) Important: Red Hat JBoss BRMS 6.0.3 security update
2014-11-24 20:43:48
(RHSA-2014:1833) Important: Red Hat JBoss Enterprise Web Platform 5.2.0 security update
2014-11-10 00:00:00
(RHSA-2014:1892) Important: Red Hat JBoss BPM Suite 6.0.3 update
2014-11-24 20:44:18
nessus
nessus
securityvulns
securityvulns
CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack
2014-08-18 00:00:00
[USN-2769-1] Apache Commons HttpClient
2015-10-25 00:00:00
[ MDVSA-2014:170 ] jakarta-commons-httpclient
2014-10-15 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: httpcomponents-client-4.2.5-4.fc20
2014-08-30 03:58:27
[SECURITY] Fedora 19 Update: httpcomponents-client-4.2.5-4.fc19
2014-08-30 03:57:30
[SECURITY] Fedora 20 Update: jakarta-commons-httpclient-3.1-15.fc20
2014-08-27 01:31:46
freebsd
freebsd
Axis2 -- Security vulnerabilities on dependency Apache HttpClient
2012-12-06 00:00:00
osv
osv
commons-httpclient - security update
2015-05-19 00:00:00
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
2018-10-17 00:05:06
Improper certificate validation in org.apache.httpcomponents:httpclient
2018-10-17 00:05:15
ubuntucve
ubuntucve
f5
f5
SOL15364328 - Apache vulnerabilities CVE-2012-5783, CVE-2012-6153, and CVE-2014-3577
2016-02-02 00:00:00
SOL15737 - Apache vulnerability CVE-2014-3577
2014-10-23 00:00:00
K15737 : Apache vulnerability CVE-2014-3577
2014-10-23 00:00:00
debian
debian
[SECURITY] [DLA 222-1] commons-httpclient security update
2015-05-19 15:18:39
amazon
amazon
Important: jakarta-commons-httpclient
2014-09-17 21:47:00
ubuntu
ubuntu
Apache Commons HttpClient vulnerabilities
2015-10-14 00:00:00
mageia
mageia
Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerability
2014-08-25 12:44:11
Updated cxf packages fix security vulnerabilities
2014-12-31 15:28:04
centos
centos
jakarta security update
2014-09-08 16:54:16
httpcomponents security update
2014-09-03 23:09:02
oraclelinux
oraclelinux
jakarta-commons-httpclient security update
2014-09-08 00:00:00
httpcomponents-client security update
2014-09-03 00:00:00
cve
cve
CVE-2014-3577
2014-08-21 14:55:00
CVE-2017-1000397
2018-01-26 02:29:00
CVE-2017-1000396
2018-01-26 02:29:00
github
github
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
2018-10-17 00:05:06
Improper Certificate Validation in Jenkins
2022-05-14 01:04:35
MitM on Jenkins Maven Plugin
2022-05-14 03:45:43
prion
prion
Design/Logic Flaw
2014-08-21 14:55:00
Design/Logic Flaw
2018-01-26 02:29:00
Design/Logic Flaw
2018-01-26 02:29:00
veracode
veracode
Improper Certificate Common Name Verification Allows Spoofing SSL Servers
2019-01-15 09:00:42
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 08:59:46
debiancve
debiancve
CVE-2014-3577
2014-08-21 14:55:00
CVE-2012-6153
2014-09-04 17:55:00
redhatcve
redhatcve
CVE-2017-1000402
2017-11-21 11:23:42
CVE-2017-1000396
2017-11-21 11:21:17
atlassian
atlassian
suse
suse
Security update for apache-commons-httpclient (important)
2020-11-07 00:00:00
Security update for apache-commons-httpclient (important)
2020-11-08 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0141
2020-09-17 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0141
2020-09-17 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
74.4%
Related for MGASA-2014-0348