4.3

CVE-2014-4630

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Bsafe Micro-edition-suite Version4.0.0
Dell ≫ Bsafe Micro-edition-suite Version4.0.1
Dell ≫ Bsafe Micro-edition-suite Version4.0.2
Dell ≫ Bsafe Micro-edition-suite Version4.0.3
Dell ≫ Bsafe Micro-edition-suite Version4.0.4
Dell ≫ Bsafe Micro-edition-suite Version4.0.5
Dell ≫ Bsafe Ssl-j Version <= 6.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.375
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
https://secure-resumption.com/
Technical Description
http://www.securityfocus.com/bid/72534
Third Party Advisory
VDB Entry