What is CVE-2013-0264?

CVE-2013-0264 is a high-severity vulnerability in Cumin, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2019-12-30.

How severe is CVE-2013-0264?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cumin

CVE-2013-0264

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.

Vulnerability class: Improper Certificate Validation

EPSS: 0.005 (42.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Cumin — versions r5310
Redhat Mrg_management_console — versions r5310

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

secalert@redhat.com (Patch, x_refsource_MISC, Issue Tracking, Vendor Advisory)
secalert@redhat.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2013-0264?: CVE-2013-0264 is a high-severity vulnerability in Cumin, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2019-12-30.
How severe is CVE-2013-0264?: High severity. CVSS v3 base score is 7.5 out of 10.