CVE-2014-4749 in PowerVCinfo

Summary

IBM PowerVC 1.2.0 before FixPack3 does not properly use the known_hosts file, which allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

07/09/2014

Disclosure

08/20/2014

Entries

1

CPE

ready

CVSS

5.3

EPSS

0.00236

CTI

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-4749
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-4749
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-4749/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!