NVD

Id
37280  
Name
CVE-2013-1014  
Description
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-05-20  
Modified Date
2013-11-02  
Seq
2013-1014  

Actions