5520 matches found
CVE-2025-9708 Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks
A vulnerability exists in the Kubernetes C client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially...
UBUNTU-CVE-2022-50345
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation via a flaw in the certificate validation logic, which accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. An attacker can use this to...
UBUNTU-CVE-2023-53293
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Openfire has potential identity spoofing issue via unsafe CN parsing
Summary Identity spoofing in X.509 client certificate authentication in Openfire allows internal attackers to impersonate other users via crafted certificate subject attributes, due to regex-based extraction of CN from an unescaped, provider-dependent DN string. Analysis Openfire’s SASL EXTERNAL...
GHSA-W252-645G-87MP Openfire has potential identity spoofing issue via unsafe CN parsing
Summary Identity spoofing in X.509 client certificate authentication in Openfire allows internal attackers to impersonate other users via crafted certificate subject attributes, due to regex-based extraction of CN from an unescaped, provider-dependent DN string. Analysis Openfire’s SASL EXTERNAL...
BMC Control-M 安全漏洞
BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. An authentication bypass vulnerability exists in BMC Control-M that stems from an authentication bypass when using an empty or default kdb keystore or a default...
CVE-2023-53212
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2022-50290
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2023-53227
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2022-50338
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-53212
Removed by vendor...
UBUNTU-CVE-2023-53183
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Kubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks
CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N — Medium 6.8 A vulnerability exists in the Kubernetes C client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. This flaw allows ...
PT-2025-38069
Name of the Vulnerable Software and Affected Versions Kubernetes C client versions prior to 17.0.14 Description A flaw exists in the Kubernetes C client's certificate validation logic, allowing it to accept certificates from any Certificate Authority CA without proper trust chain verification. Th...
SUSE CVE-2025-39799
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
UBUNTU-CVE-2025-39799
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-54894
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...