Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:29 p.m.•17 views

CVE-2021-27018

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS7AI score0.00541EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/30 6:15 p.m.•15 views

CVE-2021-27018

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/30 6:15 p.m.•22 views

Design/Logic Flaw

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

4.3CVSS7.4AI score0.00541EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/08/30 6:15 p.m.•9 views

CVE-2021-27018

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS7.4AI score0.00541EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/08/30 6:15 p.m.•46 views

CVE-2021-27018

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS7.1AI score0.00541EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/30 6:15 p.m.•17 views

UBUNTU-CVE-2021-27018

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/30 12:00 a.m.•16 views

Tenable信任管理问题漏洞

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, USA. Sc is a vulnerability analysis solution from Tenable Network Security, Inc. that supports real-time vulnerability assessment and management. A security vulnerability exists in Tenable, whi...

7.5CVSS7.3AI score0.00541EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/30 12:00 a.m.•1 views

CVE-2021-27018: Improper Certificate Validation

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source...

7.5CVSS5.8AI score0.00541EPSS
SaveExploits0References2
OSV
OSV
•added 2020/09/24 2:15 p.m.•9 views

CVE-2020-6020

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator...

6.4CVSS6.6AI score0.00513EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/06/06 12:00 a.m.•14 views

The vulnerability of the RESTful service programming interface of the Cisco Identity Services Engine, a connection policy management platform, allows a perpetrator to generate arbitrary certificates signed by internal certification services.

The vulnerability of the RESTful Services Programmable Interface ERS implementation of the Cisco Identity Services Engine platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to generate arbitrary certificates signed by the internal certification...

6.8CVSS6.8AI score0.01101EPSS
SaveExploits0References3
OSV
OSV
•added 2019/05/16 2:29 a.m.•13 views

CVE-2019-1851

A vulnerability in the External RESTful Services ERS API of the Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority CA Services on ISE. This vulnerability is due to an incorrect...

6.8CVSS6.8AI score0.01101EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/05/16 1:20 a.m.•42 views

CVE-2019-1851 Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability

A vulnerability in the External RESTful Services ERS API of the Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority CA Services on ISE. This vulnerability is due to an incorrect...

6.8CVSS6.6AI score0.01101EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2019/05/16 1:20 a.m.•14 views

CVE-2019-1851 Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability

A vulnerability in the External RESTful Services ERS API of the Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority CA Services on ISE. This vulnerability is due to an incorrect...

6.8CVSS7AI score0.01101EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2007/02/04 12:28 a.m.•4 views

CVE-2006-6967

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. In addition, it describes...

5.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2006/07/27 12:00 a.m.•428 views

Check Point FireWall-1 ICA Service Detection

The remote host is running Check Point FireWall-1 and is operating a web server on this port for its internal certificate authority ICA, which provides users with certificate revocation lists and registers users when using the Policy Server. Note that it is not known whether it is possible to...

5.6AI score
SaveExploits0
Rows per page
Query Builder