CVE-2014-3694
pidgin: SSL/TLS plug-ins failed to check Basic Constraints
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · October 22, 2014
Updated · November 21, 2025
Description
It was found that Pidgin's SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 3.1CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS 2.0 · 2.6AV:N/AC:H/Au:N/C:N/I:P/A:N
CWE-295 · Improper Certificate Validation