PT-2012-1878
CVE-2011-4408
·
تاريخ النشر
2012-06-16
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Ubuntu Single Sign On Client versions 11.04 through 11.10
Description
The issue allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack due to improper validation of SSL certificates when using HTTPS.
Recommendations
For Ubuntu Single Sign On Client versions 11.04 through 11.10, consider disabling HTTPS until a proper fix is applied to ensure SSL certificates are validated correctly.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾