CVE Daily

CVE-2013-0264

An import error was introduced in Cumin in the code refactoring in r5310. Server...

High CVSS 7.5

Overview

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.

CWE: CWE-295 Published: 2019-12-30T22:15:11.293
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags