CVE-2013-6444 in PyWBEM

Resumen (Inglés)

PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-11-04

Divulgación

2014-05-05

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
69583	PyWBEM escalada de privilegios	20	No está definido	No está definido	CVE-2013-6444

Fuentes

• MITRE
• NVD
• CVE Details