CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It affects Windows.
CVE
CVE-2014-2845
Severity
MEDIUM
CVSS
5.9
EPSS
0.94%
Windows
Original NVD Description
Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authority.
Related CVEs
Other vulnerabilities affecting the same vendor(s)