CVE-2014-0104 describes a vulnerability in fence-agents before version 4.0.17, specifically within the fence_cisco_ucs.py script, where remote SSL certificates are not properly verified. This oversight allows a man-in-the-middle attacker to spoof SSL servers using arbitrary certificates, potentially compromising the integrity of communications. Rated as MEDIUM severity with a CVSS score of 5.9, the vulnerability requires high attack complexity but can lead to high impact on data integrity without user interaction. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.0.17CPE matchmatch criteria | cpe:2.3:a:clusterlabs:fence-agents:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.