Jboss Fuse@* Security Vulnerabilities and Issues — Jboss Fuse@* CVE List

Lucene search

RedhatJboss Fuse*

3 matches found

CVE•added 2015/06/24 4:59 p.m.•77 views

CVE-2013-7397

Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to spoof HTTPS servers by presenting an arbitrary certificate during use of a typ...

4.3CVSS9AI score0.0106EPSS

CVE•added 2015/06/24 4:59 p.m.•70 views

CVE-2013-7398

main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.

4.3CVSS8.9AI score0.01231EPSS

CVE•added 2015/07/08 3:59 p.m.•43 views

CVE-2014-8175

Red Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions and access the HawtIO console by leveraging an account defined in the users.properties file.

6CVSS7.3AI score0.00191EPSS