{"action":"Upgrade ca.juliusdavies:not-yet-commons-ssl to 0.3.15 or later.","affected":[{"fixed":"0.3.15","introduced":"0"}],"component":"ca.juliusdavies:not-yet-commons-ssl","cve_ids":["CVE-2014-3604"],"ecosystem":"Maven","epss":0.0094,"exploited":false,"fixed_versions":["0.3.15"],"ghsa_id":"GHSA-cmxj-wx9v-52qr","id":"tcs_01M5N8SSR6VF8MNKGWAHJHC6V0","modified_at":"2024-12-05T05:56:56.068602Z","published_at":"2022-05-14T03:59:54Z","references":["https://osv.dev/vulnerability/GHSA-cmxj-wx9v-52qr","https://nvd.nist.gov/vuln/detail/CVE-2014-3604","https://bugzilla.redhat.com/show_bug.cgi?id=1131803","https://exchange.xforce.ibmcloud.com/vulnerabilities/97659","https://github.com/victims/victims-cve-db/blob/master/database/java/2014/3604.yaml","http://juliusdavies.ca/svn/viewvc.cgi/not-yet-commons-ssl?view=rev&revision=172","http://rhn.redhat.com/errata/RHSA-2015-1888.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-cmxj-wx9v-52qr","url":"https://osv.dev/vulnerability/GHSA-cmxj-wx9v-52qr"}],"summary":"Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL"}