VULNERABILITY INTELLIGENCE

CVE-2013-0264

CVSS score7.5 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2019-12-30
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references