Описание
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cmg:openwave_wap_gateway:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00373
Низкий
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
EPSS
Процентиль: 58%
0.00373
Низкий
6.4 Medium
CVSS2
Дефекты
NVD-CWE-Other