Improper Validation of Certificate with Host Mismatch... · CVE-2023-34143 · GitHub Advisory Database · GitHub

Improper Validation of Certificate with Host Mismatch...

High severity Unreviewed Published Jul 18, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02.

References

Published by the National Vulnerability Database

Jul 18, 2023

Published to the GitHub Advisory Database Jul 18, 2023

Last updated Apr 4, 2024

Weaknesses

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate. Learn more on MITRE.

CWE-297

Improper Validation of Certificate with Host Mismatch

The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host. Learn more on MITRE.