Red Hat Security AdvisoryRHSA-2014:1891
Red Hat JBoss BRMS 6.0.3 security update
Released 2014-11-24 · Red Hat rating Important · View on Red Hat →
Fixes 2 records
Priority LOW 38
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09189 · Published 2014-08-21 · Partial fix · 4.3.5 CWE-347
Priority LOW 29
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05844 · Published 2014-09-04 · Partial fix · 4.2.3 CWE-20
