8149 matches found
CVE-2019-1231
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'...
Information disclosure
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'...
PT-2019-5516 · Openwrt · Ustream-Ssl +1
Name of the Vulnerable Software and Affected Versions: OpenWrt versions 15.05.1 and 18.06.4 Description: An information leak vulnerability exists in the ustream-ssl library of OpenWrt. When connecting to a remote server, the server's SSL certificate is checked, but no action is taken when the...
CVE-2019-11497
In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This...
Privilege escalation
In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This...
Rome SDK Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation. This vulnerability allows an unauthenticated attacker to establish connection with an invalid SSL/TLS server certificate. To exploit this, an attacker would have to Man-In-The-Middle ...
The vulnerability of the OpenSSL library, related to errors in the certificate validation process, allows attackers to compromise the integrity of data.
The vulnerability of the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
Null pointer dereference
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...
PT-2019-7730 · Imapfilter +2 · Imapfilter +2
Name of the Vulnerable Software and Affected Versions: IMAPFilter versions prior to 2.6.13 Description: The issue is related to the failure of IMAPFilter to validate the hostname in an SSL certificate. This could potentially lead to security issues, but specific details about the estimated number...
CVE-2019-3751
Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and...
CVE-2019-3751
Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and...
Input validation
Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and...
CVE-2019-3751
Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and...
CVE-2019-3751
Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability that may allow an unauthenticated remote attacker to perform a man‑in‑the‑middle attack by presenting a crafted certificate, enabling interception and potential view...
Dell EMC Enterprise Copy Data Management Certificate Validation Security Bypass Vulnerability
Description Dell EMC Enterprise Copy Data Management is prone to a security-bypass vulnerability because the application fails to properly validate certificates. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid...
CVE-2019-15525
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...
CVE-2019-15525
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...
Design/Logic Flaw
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1...
CVE-2019-15525
CVE-2019-15525 affects the pw3270 terminal emulator prior to version 5.1, where SSL certificate validation is missing. The consequence is that a network attacker could potentially impersonate a trusted server, enabling improper handling of TLS connections. The provided documents confirm the issue...