Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7658
HistoryOct 30, 2018 - 7:17 a.m.

Man-in-the-Middle (MitM)

2018-10-3007:17:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

JSON

smack is vulnerable to man-in-the-middle. A lack of verification of the basicConstraints and nameConstraints in the ServerTrustManager component for the X.509 certificate chains from the SSL server would allow attackers to spoof a server and perform MITM attacks via a crafted certificate chain to obtain confidential information.

CPENameOperatorVersion
smackle3.2.1
smackle3.1.0
smackle4.0.0

Related

prion 1
nessus 2
openvas 4
fedora 3
cve 1
ibm 1
cert 1
securityvulns 1
mageia 1
redhat 3
prion
prion
Design/Logic Flaw
2014-04-30 10:49:00
nessus
nessus
Fedora 21 : smack-3.2.2-8.fc21 (2014-16312)
2014-12-15 00:00:00
Fedora 20 : smack-3.2.2-6.fc20 (2014-16383)
2014-12-15 00:00:00
openvas
openvas
Fedora Update for smack FEDORA-2014-16312
2015-01-05 00:00:00
Fedora Update for smack FEDORA-2015-0046
2015-01-12 00:00:00
Fedora Update for smack FEDORA-2014-16383
2014-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: smack-3.2.2-8.fc21
2014-12-13 09:34:53
[SECURITY] Fedora 21 Update: smack-4.0.6-1.fc21
2015-01-11 10:57:16
[SECURITY] Fedora 20 Update: smack-3.2.2-6.fc20
2014-12-15 04:29:51
cve
cve
CVE-2014-0363
2014-04-30 10:49:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities have been identified in Smack API shipped with IBM Tivoli Netcool Impact (CVE-2014-0363, CVE-2014-0364)
2022-12-13 01:10:48
cert
cert
Ignite Realtime Smack XMPP API contains multiple vulnerabilities
2014-04-29 00:00:00
securityvulns
securityvulns
CVE-2014-5075 MitM Vulnerability in the Smack XMPP Library for Java
2014-08-11 00:00:00
mageia
mageia
Updated smack packages fix security vulnerabilities
2014-12-26 20:04:58
redhat
redhat
(RHSA-2014:0819) Important: Red Hat JBoss BPM Suite 6.0.2 update
2014-06-30 20:43:02
(RHSA-2014:0818) Important: Red Hat JBoss BRMS 6.0.2 update
2014-06-30 20:42:20
(RHSA-2015:1176) Important: Red Hat JBoss Fuse 6.2.0 update
2015-06-23 16:46:09

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

JSON
Related for VERACODE:7658
prion1nessus2openvas4fedora3cve1ibm1cert1securityvulns1mageia1redhat3