← Back

Cyberduck

cyberduck

Vendor: Cyberduck • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2845
1Cyberduck
1Cyberduck
May 13, 2026
Nov 15, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authori...Show more
Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authority.Show less