Описание
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| twisted | fixed | 18.9.0-7 | package | |
| twisted | fixed | 18.9.0-3+deb10u1 | buster | package |
| twisted | no-dsa | stretch | package | |
| twisted | no-dsa | jessie | package |
Примечания
https://github.com/twisted/twisted/pull/1147
https://twistedmatrix.com/trac/ticket/9561
EPSS
Связанные уязвимости
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
EPSS