← Back

CVE-2013-2073

nvd nist
Published: May 2, 2014Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.

Affected (8)

Products: Transifex: Transifex
Transifex
1 product
Transifex
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Transifex
Transifex
Up to 0.8
Transifex
Version 0.1
Transifex
Version 0.2
Transifex
Version 0.3
Transifex
Version 0.4
Transifex
Version 0.5
Transifex
Version 0.6
Transifex
Version 0.7

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.