Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-8155
HistoryAug 14, 2015 - 6:59 p.m.

Design/Logic Flaw

2015-08-1418:59:00
PRIOn knowledge base
www.prio-n.com
7

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.8%

GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.

CPENameOperatorVersion
gnutlsle2.9.9

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.8%