What’s Vulnerable › Vulnerabilities

CVE-2014-3706

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-18 · updated 2026-06-17
• Weakness: CWE-295

Description

ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates.

Affected products

• RedHat Enterprise Mrg: 3.0

References

• http://www.securityfocus.com/bid/101507
• https://bugzilla.redhat.com/show_bug.cgi?id=1154977
• http://www.securityfocus.com/bid/101507
• https://bugzilla.redhat.com/show_bug.cgi?id=1154977

Get alerted when CVE-2014-3706 or the next vulnerability affects your stack