CVE-2013-0253 The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
MediumCVSS 5.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache maven | = 3.0.4 | No fix listed |
References
- RHSA-2013:0700 vendor-advisory
- bugzilla.redhat.com
- [pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1 mailing-list
- maven.apache.org patch vendor-advisory