CVE-2014-2845

Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a…

published November 15, 2017

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authority.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.2th percentile
Published
2017-11-15T18:00Z
EPSS history
Timeline
  • 15 NOV 18:00Z
    Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a…
    cvelistv5