CVE-2014-0104

Published: 02/01/2020 Updated: 10/01/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

In fence-agents prior to 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle malicious users to spoof SSL servers via arbitrary SSL certificates.

Vulnerable Product	Search on Vulmon	Subscribe to Product
clusterlabs fence-agents

Debian Bug report logs - #764801 CVE-2014-0104: fence-agents: no verification of remote SSL certificates Package: fence-agents; Maintainer for fence-agents is Debian HA Maintainers <debian-ha-maintainers@listsaliothdebianorg>; Source for fence-agents is src:fence-agents (PTS, buildd, popcon) Reported by: Moritz Muehlenhof ...

CWE-295 https://security-tracker.debian.org/tracker/CVE-2014-0104 https://access.redhat.com/security/cve/cve-2014-0104 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0104 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0104 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764801 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-0104

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect