Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-6444
HistoryMay 05, 2014 - 5:06 p.m.

Code injection

2014-05-0517:06:00
PRIOn knowledge base
www.prio-n.com
3

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject’s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CPENameOperatorVersion
pywbemle0.7

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%