Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xp43-gqwv-mmjp

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 50%
0.0027
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 9.1
nvd
почти 7 лет назад

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

EPSS

Процентиль: 50%
0.0027
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-295