GCVE-110-CERTCC-2014-118748

Advisory PublishedCVSS 6.4/10

Vulnetix · Advisory published April 24, 2014

The POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates, allowing an attacker to trick the victim application into trusting a malicious certificate.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.4/10

Medium · AV:N/AC:L/Au:N/C:P/I:P/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.7remediation_levelOFreport_confidenceCenvironmental_score1.18743724441125target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND