NetSight
medium5.8

CVE-2014-0636

EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-…

Impact

EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.

Affected products

VendorProductAffected versions
DellBsafe Micro-Edition-Suite
Versions 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5

Weakness classification

References