Vulnerabilities > Novell > Kanaka > 2.7

DATE CVE VULNERABILITY TITLE RISK
2013-04-07 CVE-2013-2770 Improper Input Validation vulnerability in Novell Kanaka 2.7/2.7.1
The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate.
network
novell CWE-20
5.8