Vulnerability in Dell Bsafe Micro-Edition-Suite

CVE-2014-0636

EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate chain.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.007 (48.2th percentile) — read the EPSS interpretation.

Affected products

Dell Bsafe_micro-edition-suite — versions 3.2.0, 3.2.1, 3.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Broken Link)
security_alert@emc.com (Third Party Advisory, vdb-entry, x_refsource_BID)