[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f027BEnOKIQ4_4ZHg3VQEfGH3FlMt-A4-9qEnlsQ8dFo":3,"g5a-risk:CVE-2014-3577":263},{"success":4,"data":5,"meta":261},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":40,"references":41,"referencesCount":209,"weaknesses":210,"weaknessesCount":214,"isActivelyExploited":215,"cisaInfo":15,"otxData":15,"relatedBlogPosts":216,"seoMetadata":217,"configurations":242,"relatedVendorCves":259,"notableEvents":260},"CVE-2014-3577","What is CVE-2014-3577?","org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the...","2014-08-21T14:55:05.1","2025-04-12T10:46:40.837",5.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,4.9,0.09189,[28,28,28,28,28,28,28],"Medium",[32,37],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"apache","httpclient","*","cpe:2.3:a:apache:httpclient:*:*:*:*:*:*:*:*",{"vendor":33,"product":38,"version":35,"criteria":39,"vulnerable":4},"httpasyncclient","cpe:2.3:a:apache:httpasyncclient:*:*:*:*:*:*:*:*",2,[42,46,49,56,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105,108,111,114,117,122,126,129,132,136,140,145,149,153,157,160,164,168,171,175,178,181,184,187,190,193,196,199,203,205,207],{"url":43,"source":44,"tags":45},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-11\u002Fmsg00032.html","Opensuse",[],{"url":47,"source":44,"tags":48},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-11\u002Fmsg00033.html",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F127913\u002FApache-HttpComponents-Man-In-The-Middle.html","Packetstormsecurity",[53,54,55],"Exploit","Third Party Advisory","VDB Entry",{"url":57,"source":58,"tags":59},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1146.html","Red Hat",[54],{"url":61,"source":58,"tags":62},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1166.html",[54],{"url":64,"source":58,"tags":65},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1833.html",[54],{"url":67,"source":58,"tags":68},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1834.html",[54],{"url":70,"source":58,"tags":71},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1835.html",[54],{"url":73,"source":58,"tags":74},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1836.html",[54],{"url":76,"source":58,"tags":77},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1891.html",[54],{"url":79,"source":58,"tags":80},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2014-1892.html",[54],{"url":82,"source":58,"tags":83},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0125.html",[54],{"url":85,"source":58,"tags":86},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0158.html",[54],{"url":88,"source":58,"tags":89},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0675.html",[54],{"url":91,"source":58,"tags":92},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0720.html",[54],{"url":94,"source":58,"tags":95},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0765.html",[54],{"url":97,"source":58,"tags":98},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0850.html",[54],{"url":100,"source":58,"tags":101},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0851.html",[54],{"url":103,"source":58,"tags":104},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1176.html",[54],{"url":106,"source":58,"tags":107},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1177.html",[54],{"url":109,"source":58,"tags":110},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-1888.html",[54],{"url":112,"source":58,"tags":113},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1773.html",[54],{"url":115,"source":58,"tags":116},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-1931.html",[54],{"url":118,"source":119,"tags":120},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2014\u002FAug\u002F48","Seclists",[53,121,54],"Mailing List",{"url":123,"source":124,"tags":125},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60466","Secunia",[54],{"url":127,"source":124,"tags":128},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60589",[54],{"url":130,"source":124,"tags":131},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F60713",[54],{"url":133,"source":134,"tags":135},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2021\u002F10\u002F06\u002F1","Openwall",[],{"url":137,"source":138,"tags":139},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2018-4258247.html","Oracle",[],{"url":141,"source":142,"tags":143},"http:\u002F\u002Fwww.osvdb.org\u002F110143","Osvdb",[144],"Broken Link",{"url":146,"source":147,"tags":148},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F69258","Securityfocus",[54,55],{"url":150,"source":151,"tags":152},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1030812","Securitytracker",[54,55],{"url":154,"source":155,"tags":156},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2769-1","Ubuntu",[54],{"url":158,"source":58,"tags":159},"https:\u002F\u002Faccess.redhat.com\u002Fsolutions\u002F1165533",[54],{"url":161,"source":162,"tags":163},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F95327","Ibmcloud",[54,55],{"url":165,"source":166,"tags":167},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05103564","Hpe",[54],{"url":169,"source":166,"tags":170},"https:\u002F\u002Fh20566.www2.hpe.com\u002Fportal\u002Fsite\u002Fhpsc\u002Fpublic\u002Fkb\u002FdocDisplay?docId=emr_na-c05363782",[54],{"url":172,"source":173,"tags":174},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","Apache",[],{"url":176,"source":173,"tags":177},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",[],{"url":179,"source":173,"tags":180},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",[],{"url":182,"source":173,"tags":183},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E",[],{"url":185,"source":173,"tags":186},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E",[],{"url":188,"source":173,"tags":189},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E",[],{"url":191,"source":173,"tags":192},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",[],{"url":194,"source":173,"tags":195},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",[],{"url":197,"source":173,"tags":198},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E",[],{"url":200,"source":201,"tags":202},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20231027-0003\u002F","Netapp",[],{"url":43,"source":44,"tags":204},[],{"url":47,"source":44,"tags":206},[],{"url":50,"source":51,"tags":208},[53,54,55],50,[211],{"id":212,"name":212,"description":213},"Unknown","NVD-CWE-Other",1,false,[],{"title":218,"metaDescription":219,"keywords":220,"canonicalUrl":221,"structuredData":222},"What is CVE-2014-3577? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-3577, a medium severity cyber security vulnerability from 2014. org.apache.http.conn.ssl.AbstractVerifier in Apache HttpCo...","CVE-2014-3577, CVE-2014-3577 vulnerability, CVE-2014-3577 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, apache security, httpclient vulnerability, httpasyncclient vulnerability","\u002Fwhat-is\u002Fcve-2014-3577",{"@context":223,"@type":224,"headline":218,"description":219,"datePublished":10,"dateModified":11,"author":225,"publisher":229,"about":233,"mainEntityOfPage":237,"articleSection":240,"keywords":241},"https:\u002F\u002Fschema.org","TechArticle",{"@type":226,"name":227,"url":228},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":226,"name":227,"url":228,"logo":230},{"@type":231,"url":232},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":234,"name":6,"description":235,"additionalType":236},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":238,"@id":239},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-3577","Cybersecurity","CVE-2014-3577, CVE-2014-3577 vulnerability, CVE-2014-3577 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[243,252],{"Operator":15,"Negate":15,"Nodes":244},[245],{"Operator":246,"Negate":15,"CPEMatch":247},"OR",[248],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":249,"VersionStartExcluding":15,"VersionStartIncluding":250,"VersionEndExcluding":15,"VersionEndIncluding":251},"B255B644-287F-4245-93EC-35C72729454F","4.0","4.3.4",{"Operator":15,"Negate":15,"Nodes":253},[254],{"Operator":246,"Negate":15,"CPEMatch":255},[256],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":257,"VersionStartExcluding":15,"VersionStartIncluding":250,"VersionEndExcluding":15,"VersionEndIncluding":258},"A889F3E1-B405-4F5C-84A9-DFBA68ECEDC7","4.0.1",[],[],{"lastModified":11,"cacheTime":262,"version":21},1792241180722,{"score":264,"band":30,"action":265,"scoredAt":266},40,"Plan remediation","2026-10-17T07:22:48.722144+00:00"]