Medium severity5.9NVD Advisory· Published Jan 2, 2020· Updated Jun 17, 2026

CVE-2014-0104

Description

In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

fence-agents/fence-agentsv5
Range: before 4.0.17
Red Hat/fence-agentsllm-create
Range: <4.0.17
Clusterlabs/fence-agents
cpe:2.3:a:clusterlabs:fence-agents:*:*:*:*:*:*:*:*
Range: <4.0.17
osv-coords
pkg:rpm/opensuse/fence-agents&distro=openSUSE%20Tumbleweed
Range: < 4.0.24+git.1480563949.e67fcd4-1.1

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/cve-2014-0104nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
bugzilla.suse.com/show_bug.cginvdIssue TrackingThird Party Advisory
security-tracker.debian.org/tracker/CVE-2014-0104nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000