CVE-2014-0636

Related Files

RSA BSAFE Micro Edition Suite Certificate Chain Processing

Posted Apr 11, 2014

Site emc.com

RSA BSAFE MES 3.2.6, 4.0.5 and higher contains a fix for a security vulnerability that could potentially be exploited by malicious users to create improperly authenticated SSL connections. This vulnerability may cause creation of improperly authenticated SSL connections between the client and the server due to incorrect certificate chain processing logic. MES 4.0.5 and 3.2.6 are designed to address this issue by performing proper certificate validation.

tags | advisory

advisories | CVE-2014-0636

SHA-256 | 236ef77d0a1bb2c038e8abdf9d1b831bb5bdcc69b21aa665f1c64528c1e2a9ac

Download | Favorite | View