CVE-2013-1228 - Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280

Back Back to CVE browser

MEDIUM

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280

Published Sep 6, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 0.48%

Description

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (1)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1228
vendor-advisoryx_refsource_CISCOVendor Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1228		vendor-advisoryx_refsource_CISCOVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Sep 6, 2013

Updated Sep 16, 2024

Reserved Jan 11, 2013

Link CVE-2013-1228

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1228

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-1228