CVE-2008-3249

The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to…

published July 21, 2008

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01296 · 70.0th percentile
Published
2008-07-21T17:00Z
EPSS history
Timeline
  • 21 JUL 17:00Z
    The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to…
    cvelistv5