Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_linux:6.10:*:*:*:*:*:*:*

part: o version: 6.10 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Linux (3274dc93-112d-51d5-8bcf-fbf18b1917ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14823 vulnerable 2026-06-08 05:12:56.171305 Details available
MEDIUM (6.8)
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.
Published: 2019-10-14T19:35:04.000Z
Updated: 2024-08-05T00:26:39.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.