CVE-2024-34454

HIGH Year: 2024
CVSS v3 Score
7.4
High
Weakness Type
CWE-269
View all →

Vulnerability Description

Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a secondary verification mechanism that only checks whether a CA is known and ignores the CA details and signature (and because * is accepted as a Common Name).

Related Vulnerabilities

CVE-2016-9928

HIGH
CVSS:7.4(High)

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will...

CWE-2692016

CVE-2017-10104

HIGH
CVSS:7.4(High)

Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanced Management Console: 2.6. Easily exploi...

CWE-2692017

CVE-2017-6924

HIGH
CVSS:7.4(High)

In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved commen...

CWE-2692017

CVE-2018-1000028

HIGH
CVSS:7.4(High)

Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server (nfsd) that can result in remote users reading or...

CWE-2692018

CVE-2018-11767

HIGH
CVSS:7.4(High)

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.

CWE-2692018

CVE-2023-52093

HIGH
CVSS:7.4(High)

An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain ...

CWE-2692023