CVE-2014-8918

CWE-3103 documents3 sources
Severity
5.8MEDIUM
EPSS
0.1%
top 68.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Appscan
Timeline
PublishedFeb 2
Latest updateMay 17

Description

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDibm/security_appscan15 versions+14

🔴Vulnerability Details

2
GHSA
GHSA-xpfq-37ch-97mx: IBM Security AppScan Standard 8↗2022-05-17
▶
CVEList
CVE-2014-8918: IBM Security AppScan Standard 8↗2015-02-02
▶
CVE-2014-8918 (MEDIUM CVSS 5.8) | IBM Security AppScan Standard 8.x a | cvebase.io