Thomas Leong

**Name of the Vulnerable Software and Affected Versions** wolfSSL (affected versions not specified) **Description** A certificate verification error occurs in wolfSSL when built with the `WOLFSSL SYS CA CERTS` and `WOLFSSL APPLE NATIVE CERT VALIDATION` options. This results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted Certificate Authority (CA) to be accepted, regardless of the hostname. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.