PT-2012-6136

CVE-2012-5824

·

Published

2012-11-04

·

Updated

2022-02-07

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Trillian version 5.1.0.19
Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate. This allows attackers to spoof SSL servers via an arbitrary valid certificate.
Recommendations For Trillian version 5.1.0.19, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-295: Improper Certificate Validation
Related identifiers
CVE-2012-5824
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com