CVE-2024-40714

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during…

High · published September 7, 2024

CVSS v3.0
8.3
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.

The record
Technical detail
CVSS v3.0
8.3 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Published
2024-09-07T16:11Z
EPSS history
Timeline
  • 07 SEP 16:11Z
    An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during…
    cvelistv5