Security Bulletin: Vulnerability found in IBM ApplinX.

Summary IBM ApplinX has been updated in order to address the vulnerability CVE-2014-3604. Specifics of this vulnerability come under CWE-297: Improper Validation of Certificate with Host Mismatch Vulnerability Details CVEID:CVE-2014-3604 DESCRIPTION: Certificates.java in Not Yet Commons SSL befor...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: GHSA-CMXJ-WX9V-52QR...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: OSV:GHSA-CMXJ-WX9V-52QR...

GHSA-CMXJ-WX9V-52QR Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Mageia: Security Advisory (MGASA-2014-0551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code42 CrashPlan Remote Code Execution Vulnerability

Code42 CrashPlan is an online data backup solution from Code42 Software, USA. A remote code execution vulnerability exists in Code42 CrashPlan version 5.4.x. A remote attacker can exploit the vulnerability by using org.apache.commons.ssl.rssl. A remote attacker can exploit this vulnerability to...

[ MDVSA-2015:141 ] not-yet-commons-ssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:141 http://www.mandriva.com/en/support/security/ Package : not-yet-commons-ssl Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated not-yet-commons-ssl packages fixes security...

Mandriva Linux Security Advisory : not-yet-commons-ssl (MDVSA-2015:141)

Updated not-yet-commons-ssl packages fixes security vulnerability : It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

MGASA-2014-0551 Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

CVE-2014-3604

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2014-3604

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2014-3604

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: MEND:CVE-2014-3604...

CVE-2014-3604

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2014-5415

Name of the Vulnerable Software and Affected Versions Not Yet Commons SSL versions prior to 0.3.15 Description The issue arises from improper verification of the server hostname against the domain name in the subject's Common Name CN field of the X.509 certificate in the Certificates.java file...

CVE-2014-3604

Not-Yet-Commons-SSL (Not-Yet-Commons-SSL) CVE-2014-3604 contains a hostname verification flaw in Certificates.java: the client fails to properly verify that the server certificate CN matches the domain name. This enables MITM-style spoofing of SSL servers using arbitrary valid certificates. Affec...

CVE-2014-3604: Undefined Security Weakness

Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2014-3604

Removed by vendor...