CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14823

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.0%

CVSS Severity

CVSS v3 Score 6.8

CVSS v2 Score 5.8

References

Products affected by CVE-2019-14823

Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.4.6

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.4.6
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.4.7

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.4.7
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.5.3

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.5.3
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.5.4

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.5.4
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.6.0

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.6.0
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.6.1

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.6.1
Jss Cryptomanager Project » Jss Cryptomanager » Version: 4.6.2

cpe:2.3:a:jss_cryptomanager_project:jss_cryptomanager:4.6.2
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 6.1

cpe:2.3:o:redhat:enterprise_linux:6.1
Redhat » Enterprise Linux » Version: 6.10

cpe:2.3:o:redhat:enterprise_linux:6.10
Redhat » Enterprise Linux » Version: 6.2

cpe:2.3:o:redhat:enterprise_linux:6.2
Redhat » Enterprise Linux » Version: 6.3

cpe:2.3:o:redhat:enterprise_linux:6.3
Redhat » Enterprise Linux » Version: 6.4

cpe:2.3:o:redhat:enterprise_linux:6.4
Redhat » Enterprise Linux » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux:6.5
Redhat » Enterprise Linux » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux:6.6
Redhat » Enterprise Linux » Version: 6.7

cpe:2.3:o:redhat:enterprise_linux:6.7
Redhat » Enterprise Linux » Version: 6.8

cpe:2.3:o:redhat:enterprise_linux:6.8
Redhat » Enterprise Linux » Version: 6.9

cpe:2.3:o:redhat:enterprise_linux:6.9
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 7.1

cpe:2.3:o:redhat:enterprise_linux:7.1
Redhat » Enterprise Linux » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux:7.2
Redhat » Enterprise Linux » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux:7.3
Redhat » Enterprise Linux » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux:7.4
Redhat » Enterprise Linux » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux:7.5
Redhat » Enterprise Linux » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux:7.6
Redhat » Enterprise Linux » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux:7.7
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14823

Products

Pricing

Contact Us