CVE-2013-7110

Published: May 2, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2073.

Affected (9)

Products: Transifex: Transifex

Transifex

1 product

Transifex

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Transifex Transifex	Up to 0.9
Transifex Transifex	Version 0.1
Transifex Transifex	Version 0.2
Transifex Transifex	Version 0.3
Transifex Transifex	Version 0.4
Transifex Transifex	Version 0.5
Transifex Transifex	Version 0.6
Transifex Transifex	Version 0.7
Transifex Transifex	Version 0.8