Troubleshooting Checklist: In Secure Mail, a "Cannot authenticate to the server <FQDN> because the certificate is not valid” error appears

Do the following: Ensure that the certificate chain is valid and that the configuration is complete on the Exchange Server. Try to connect the native email client with the same Exchange Server. If it works as expected, the issue is with client certificate configuration on the XenMobile server Onl...

XenMobile POC Cheat Sheet

The purpose of this cheat sheet is to provide a detailed POC checklist to assist with the implementation of On-Premise POC implementations. This checklist includes a detailed diagram of your XenMobile POC implementation populated from the information included in the filled out checklist. Addition...

SSL/TLS Service Requires Client Certificate

The remote service encrypts communications using SSL/TLS and requires a client certificate in order to establish an SSL/TLS connection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid91263; scriptversion"$Revision: 1.1 $"; scriptcvsdate"$Date: 2016/05/19 21:27:00 $";...

Pulp Insecure Creation of CA Keys Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security vulnerability exists in Pulp versions prior to 2.3.0, which stems from the creation of CA certificates and keys in the /tmp/$RANDOM...

Error: "Intermediate CA or Root CA Certificate Signature Verification Failed" on NetScaler Gateway

Enrollment and authentication works with LDAP policy however unable to enroll devices using CBA client certification authentication. Authentication is denied at NetScaler Gateway.While disabling authentication on NetScaler Gateway, client certificate can be pushed to the device using a device...

CVE-2015-6864

HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...

Design/Logic Flaw

HPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...

Design/Logic Flaw

HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...

CVE-2015-6863

HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...

CVE-2015-6863

HPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via unspecified input to the 1 Intellicus or 2 client-certificate upload component...

CVE-2015-6864

HP ArcSight Logger prior to version 6.1P1 is affected by multiple vulnerabilities in the Intellicus and client-certificate upload components, due to improper input validation, enabling remote authenticated execution of arbitrary code. Remediation per the connected Nessus entry is upgrade to 6.1P1...

FreeBSD : squid -- client-first SSL-bump does not correctly validate X509 server certificate (b6da24da-23f7-11e5-a4a5-002590263bf5)

Squid security advisory 2015:1 reports : Squid configured with client-first SSL-bump does not correctly validate X509 server certificate domain / hostname fields. The bug is important because it allows remote servers to bypass client certificate validation. Some attackers may also be able to use...

Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities

Binary data 8696.prm...

Mac OS X : Apple Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.5 / 7.1.5 / 8.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the state management which can result in the user's browser history not being fully purged from 'history.plist'...

Multiple SSL certificate authorities use predefined email addresses as proof of domain ownership

Overview Multiple SSL certificate authorities may issue certificates to a customer based solely on the control of certain email addresses. This may allow an attacker to obtain a valid SSL certificate to perform HTTPS spoofing without generating a warning in the client software. Description When a...

CentOS Update for openssl CESA-2015:0066 centos6

Check the version of openssl SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882101";...

polarssl: remote code execution

During the parsing of a ASN.1 sequence, a pointer in the linked list of asn1sequence is not initialized by asn1getsequenceof. In case an error occurs during parsing of the list, a situation is created where the uninitialized pointer is passed to polarsslfree. This sequence can be triggered when a...

UBUNTU-CVE-2014-3971

The CmdAuthenticate::authenticateX509 function in db/commands/authenticationcommands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service daemon crash by attempting authentication with an invalid X.509 client certificate...

CVE-2014-3971

The CmdAuthenticate::authenticateX509 function in db/commands/authenticationcommands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service daemon crash by attempting authentication with an invalid X.509 client certificate...

CVE-2014-3971

The CmdAuthenticate::authenticateX509 function in db/commands/authenticationcommands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service daemon crash by attempting authentication with an invalid X.509 client certificate...