Lucene search

(RHSA-2014:1146) Important: httpcomponents-client security update

🗓️ 03 Sep 2014 00:00:00Reported by RedHatType

HTTP Client security update due to incorrect extraction of host name from X.509 certificate CN field

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: IBM Content Navigator is affected by a vulnerability in Apache HttpComponents HttpClient	4 Jan 201923:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® Connect Server is vulnerable due to the use of Apache HttpComponents. (CVE-2014-3577)	8 Feb 202314:22	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2014-3577 HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name	4 Aug 202018:41	–	ibm
IBM Security Bulletins	Security Bulletin: Apache HttpComponents vulnerable to spoofing attacks are affecting Case Manager Client (CVE-2012-6153, CVE-2014-3577)	17 Jun 201812:12	–	ibm
IBM Security Bulletins	Security Bulletin: Apache HTTPComponents vulnerabilities in WebSphere Application Server (CVE-2012-6153, CVE-2014-3577)	15 Jun 201807:03	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerabilities from Apache HttpComponents affects IBM Spectrum LSF	1 Mar 201914:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HttpComponents affect IBM InfoSphere Information Server (CVE-2012-6153 CVE-2014-3577)	16 Jun 201813:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HTTP Components Libraries Affect IBM B2B Advanced Communications	16 Jun 201820:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Global Mailbox in IBM Sterling B2B Integrator (CVE-2015-5262, CVE-2014-3577)	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Portal shipped with IBM Intelligent Operations Center and related products (CVE-2015-5262)	19 Aug 202221:04	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
RedHat	7	src	httpcomponents-client	4.2.5-5.el7_0	httpcomponents-client-4.2.5-5.el7_0.src.rpm
RedHat	7	noarch	httpcomponents-client	4.2.5-5.el7_0	httpcomponents-client-4.2.5-5.el7_0.noarch.rpm
RedHat	7	noarch	httpcomponents-client-javadoc	4.2.5-5.el7_0	httpcomponents-client-javadoc-4.2.5-5.el7_0.noarch.rpm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Sep 2014 00:00Current

7.4High risk

Vulners AI Score7.4

EPSS0.01204