CVE-2013-0253

Related Files

Red Hat Security Advisory 2013-0700-01

Posted Apr 3, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0700-01 - Jenkins is a continuous integration server. It was found that all SSL certificate checking was disabled by default in the Apache Maven Wagon plug-in of Jenkins. This would make it easy for an attacker to perform man-in-the-middle attacks. Users of Red Hat OpenShift Enterprise 1.1.3 are advised to upgrade to this updated package, which corrects this issue.

tags | advisory

systems | linux, redhat

advisories | CVE-2013-0253

SHA-256 | 2e1474d74bdc6d15346e98b54cdf58c4ef035856653a88200746b02f047d94db

Download | Favorite | View

Apache Maven 3.0.4 Insecure SSL Mode

Posted Feb 25, 2013

Authored by Graham Leggett

Apache Maven version 3.0.4 (with Apache Maven Wagon version 2.1) has introduced a non-secure SSL mode by default. This mode disables all SSL certificate checking, including: host name verification , date validity, and certificate chain. Not validating the certificate introduces the possibility of a man-in-the-middle attack.

tags | advisory

advisories | CVE-2013-0253

SHA-256 | 54b8a3c9c72b613700cbc8a0df15bda1fc8bf0236fd7a3b9243695817a44ea7f

Download | Favorite | View