⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-0636

MEDIUM · 5.8 CVSS Gepubliceerd: 11-04-2014 CWE-310

Beschrijving

EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.

Vendors

Dell

Affected products

Bsafe Micro-edition-suite

References

archives.neohapsis.com
www.securityfocus.com