Approved changes feed: RSS · Atom
cpe:2.3:a:iterate_gmbh:cyberduck:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Iterate Gmbh (26238c96-24b4-5f50-8172-627a75401328) |
|---|---|
| Product | Cyberduck (06af828b-56ab-57cc-9ae3-fb4c11586428) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41256 |
vulnerable | 2026-06-08 07:25:06.827391 |
Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint
HIGH (7.4)
Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak.
This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5.
Published: 2025-06-25T09:16:58.586Z
Updated: 2025-06-25T13:34:07.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41255 |
vulnerable | 2026-06-08 07:25:06.826168 |
Cyberduck and Mountain Duck - Improper Certificate Store Handling
HIGH (8)
Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions.
This issue affects Cyberduck through 9.1.6 and Mountain Duck through 4.17.5.
Published: 2025-06-25T09:21:37.479Z
Updated: 2025-06-25T13:33:27.985Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.