CVE-2014-3706

MEDIUM

Red Hat Enterprise MRG 3 - Improper Certificate Validation in vdsm X.509 Certificates

Title source: llm
STIX 2.1

Description

ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/101507
Issue Tracking, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1154977

Scores

CVSS v3 5.9
EPSS 0.0072
EPSS Percentile 49.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-295
Status published
Products (1)
redhat/enterprise_mrg 3.0
Published Oct 18, 2017
Tracked Since Feb 18, 2026