CVE-2013-7304 in Endpoint Security

Sumário (Inglês)

Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which allows man-in-the-middle attackers to spoof SSL servers by presenting an arbitrary certificate during a session established by a client.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

22/01/2014

Divulgação

22/01/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
12043	Check Point Endpoint Security X.509 Certificate Validator Encriptação fraca	310	Prova de conceito	Correção oficial	CVE-2013-7304

Fontes

• MITRE
• NVD
• CVE Details