CVE-2017-7513CWE-295

It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields

Medium · published August 22, 2018

CVSS v3.0
5.4
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00484 · 40.4th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2018-08-22T15:00Z
EPSS history
Timeline
  • 22 AUG 15:00Z
    It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields
    cvelistv5