NVD

Id
35721  
Name
CVE-2014-8779  
Description
Pexip Infinity before 8 uses the same SSH host keys across different customers" installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-19  
Published
2015-02-03  
Modified Date
2015-02-03  
Seq
2014-8779  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182971 35721 CVE-2014-8779 http://packetstormsecurity.com/files/130174/Pexip-Infinity-Non-Unique-SSH-Host-Keys.html  View
182972 35721 CVE-2014-8779 http://www.pexip.com/sites/pexip/files/Pexip_Security_Bulletin_2015-01-02.pdf  View
182973 35721 CVE-2014-8779 20150129 CVE-2014-8779: SSH Host keys on Pexip Infinity  View
182974 35721 CVE-2014-8779 72359  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18957 JVNDB-2014-007832 Pexip Infinity における Management および Conferencing Node になりすまされる脆弱性 Pexip Infinity には、異なるカスタマのインストールに同一の SSH ホスト鍵を使用するため、Management および Conferencing Node になりすまされる脆弱性が存在します。 CVE-2014-8779 76072 CVE-2014-8779 35721 7.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007832.html 2014-11-13 2015-02-13 View