Lucene search
Veracode Vulnerability DatabaseVERACODE:46736HistoryMay 03, 2024 - 7:44 a.m.
Improper Certificate Validation
2024-05-0307:44:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
transifex-client vulnerability
certificate validation
man-in-the-middle attack
x.509 certificates
data transfer connections
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
High
EPSS
0.001
Percentile
35.2%
transifex-client is vulnerable to Improper Certificate Validation. The vulnerability is due to not validating X.509 certificates during data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.
Related
nvd
nvd
CVE-2013-7110
2014-05-02 01:59:22
prion
prion
Design/Logic Flaw
2014-05-02 01:59:00
debiancve
debiancve
CVE-2013-7110
2014-05-02 01:59:22
osv
osv
PYSEC-2014-72
2014-05-02 01:59:00
ubuntucve
ubuntucve
CVE-2013-7110
2014-05-02 00:00:00
github
github
Transifex command-line client has improper certificate validation
2022-05-17 04:45:17
cve
cve
CVE-2013-7110
2014-05-02 01:59:22
cvelist
cvelist
CVE-2013-7110
2014-05-02 01:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
High
EPSS
0.001
Percentile
35.2%
Related for VERACODE:46736