Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-0363
HistoryApr 30, 2014 - 10:49 a.m.

Design/Logic Flaw

2014-04-3010:49:00
PRIOn knowledge base
www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

59.3%

JSON

The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain.

CPENameOperatorVersion
smacklt4.0.0

Related

openvas 4
veracode 1
nessus 2
fedora 3
cve 1
cvelist 1
ibm 1
cert 1
securityvulns 1
mageia 1
redhat 3
openvas
openvas
Fedora Update for smack FEDORA-2014-16312
2015-01-05 00:00:00
Fedora Update for smack FEDORA-2014-16383
2014-12-15 00:00:00
Fedora Update for smack FEDORA-2015-0046
2015-01-12 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2018-10-30 07:17:40
nessus
nessus
Fedora 21 : smack-3.2.2-8.fc21 (2014-16312)
2014-12-15 00:00:00
Fedora 20 : smack-3.2.2-6.fc20 (2014-16383)
2014-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: smack-3.2.2-8.fc21
2014-12-13 09:34:53
[SECURITY] Fedora 20 Update: smack-3.2.2-6.fc20
2014-12-15 04:29:51
[SECURITY] Fedora 21 Update: smack-4.0.6-1.fc21
2015-01-11 10:57:16
cve
cve
CVE-2014-0363
2014-04-30 10:49:00
cvelist
cvelist
CVE-2014-0363
2014-04-30 10:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities have been identified in Smack API shipped with IBM Tivoli Netcool Impact (CVE-2014-0363, CVE-2014-0364)
2022-12-13 01:10:48
cert
cert
Ignite Realtime Smack XMPP API contains multiple vulnerabilities
2014-04-29 00:00:00
securityvulns
securityvulns
CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java
2014-08-11 00:00:00
mageia
mageia
Updated smack packages fix security vulnerabilities
2014-12-26 20:04:58
redhat
redhat
(RHSA-2014:0819) Important: Red Hat JBoss BPM Suite 6.0.2 update
2014-06-30 20:43:02
(RHSA-2014:0818) Important: Red Hat JBoss BRMS 6.0.2 update
2014-06-30 20:42:20
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09

6.2 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

59.3%

JSON
Related for PRION:CVE-2014-0363
openvas4veracode1nessus2fedora3cve1cvelist1ibm1cert1securityvulns1mageia1redhat3