Security Bulletin: Vulnerability found in IBM ApplinX.

Summary IBM ApplinX has been updated in order to address the vulnerability CVE-2014-3604. Specifics of this vulnerability come under CWE-297: Improper Validation of Certificate with Host Mismatch Vulnerability Details CVEID:CVE-2014-3604 DESCRIPTION: Certificates.java in Not Yet Commons SSL befor...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: OSV:GHSA-CMXJ-WX9V-52QR...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: GHSA-CMXJ-WX9V-52QR...

Mageia: Security Advisory (MGASA-2014-0551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 security update

An update for Red Hat JBoss SOA Platform 5.3.1 which fixes multiple security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Mandriva Linux Security Advisory : not-yet-commons-ssl (MDVSA-2015:141)

Updated not-yet-commons-ssl packages fixes security vulnerability : It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

MGASA-2014-0551 Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

CVE-2014-3604

Not-Yet-Commons-SSL (Not-Yet-Commons-SSL) CVE-2014-3604 contains a hostname verification flaw in Certificates.java: the client fails to properly verify that the server certificate CN matches the domain name. This enables MITM-style spoofing of SSL servers using arbitrary valid certificates. Affec...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: MEND:CVE-2014-3604...

Fedora Update for not-yet-commons-ssl FEDORA-2014-10746

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : not-yet-commons-ssl-0.3.15-2.fc19 (2014-10746)

Fix jar path in install. Update to upstream 0.3.15. Fixes CVE-2014-3604 . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : not-yet-commons-ssl-0.3.15-2.fc20 (2014-10729)

Fix jar path in install. Update to upstream 0.3.15. Fixes CVE-2014-3604 . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 21 : not-yet-commons-ssl-0.3.15-2.fc21 (2014-10691)

Fix jar path in install. Update to upstream 0.3.15. Fixes CVE-2014-3604. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...