Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2014-0549
HistoryDec 26, 2014 - 8:04 p.m.

Updated axis packages fix CVE-2014-3596

2014-12-2620:04:58
Gentoo Foundation
advisories.mageia.org
14

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

42.2%

JSON

Updated axis packages fixes security vulnerability: It was discovered that Axis incorrectly extracted the host name from an X.509 certificate subject’s Common Name (CN) field. A man-in-the-middle attacker could use this flaw to spoof an SSL server using a specially crafted X.509 certificate (CVE-2014-3596).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchaxis< 1.4-24.1axis-1.4-24.1.mga4

Related

oraclelinux 1
redhat 2
centos 1
amazon 1
ibm 11
nessus 12
openvas 13
ubuntucve 2
osv 2
debian 1
cve 1
prion 1
f5 2
github 1
veracode 1
suse 2
debiancve 1
oracle 2
oraclelinux
oraclelinux
axis security update
2014-09-15 00:00:00
redhat
redhat
(RHSA-2014:1193) Important: axis security update
2014-09-15 00:00:00
(RHSA-2015:1010) Important: Red Hat JBoss Portal 6.2.0 security update
2015-05-14 15:13:19
centos
centos
axis security update
2014-09-15 16:46:18
amazon
amazon
Important: axis
2014-09-17 21:47:00
ibm
ibm
Security Bulletin: Vulnerability in Apache Axis affects IBM Cúram Social Program Management (CVE-2014-3596)
2018-06-17 13:09:42
Security Bulletin: Security Vulnerability in Apache Axis affects IBM WebSphere Dashboard Framework (CVE-2014-3596)
2018-06-16 19:54:46
Security Bulletin: Two vulnerabilities exist in IBM Case Foundation and FileNet Business Process Manager (CVE-2012-5784 and CVE-2014-3596)
2018-06-17 12:12:09
nessus
nessus
Scientific Linux Security Update : axis on SL5.x, SL6.x i386/x86_64 (20140915)
2014-09-16 00:00:00
CentOS 5 / 6 : axis (CESA-2014:1193)
2014-09-16 00:00:00
Amazon Linux AMI : axis (ALAS-2014-412)
2014-10-12 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-1193)
2015-10-06 00:00:00
Mageia: Security Advisory (MGASA-2014-0549)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-412)
2015-09-08 00:00:00
ubuntucve
ubuntucve
CVE-2014-3596
2014-08-27 00:00:00
CVE-2012-5784
2012-11-04 00:00:00
osv
osv
axis - security update
2015-03-10 00:00:00
Improper Validation of Certificates in apache axis
2018-10-16 20:50:58
debian
debian
[SECURITY] [DLA 169-1] axis security update
2015-03-10 18:47:07
cve
cve
CVE-2014-3596
2014-08-27 00:55:00
prion
prion
Code injection
2014-08-27 00:55:00
f5
f5
K16821 : Apache Axis vulnerability CVE-2014-3596
2015-11-11 00:00:00
SOL16821 - Apache Axis vulnerability CVE-2014-3596
2015-06-29 00:00:00
github
github
Improper Validation of Certificates in apache axis
2018-10-16 20:50:58
veracode
veracode
Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers
2019-01-15 09:01:11
suse
suse
Security update for axis (moderate)
2019-06-07 00:00:00
Security update for axis (moderate)
2019-06-03 00:00:00
debiancve
debiancve
CVE-2014-3596
2014-08-27 00:55:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

42.2%

JSON
Related for MGASA-2014-0549
oraclelinux1redhat2centos1amazon1ibm11nessus12openvas13ubuntucve2osv2debian1cve1prion1f52github1veracode1suse2debiancve1oracle2