Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5662

Опубликовано: 27 мая 2014
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:paul_mattes:x3270:*:ga11:*:*:*:*:*:*
Версия до 3.3.12 (включая)
cpe:2.3:a:paul_mattes:x3270:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.6:*:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.7:*:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.8:-:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.8:p1:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.8:p2:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.8:p3:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.9:ga11:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.9:ga12:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.10:ga3:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.10:ga4:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.10:ga5:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.11:beta2:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.11:beta4:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.11:ga6:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.12:beta6:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.12:ga10:*:*:*:*:*:*
cpe:2.3:a:paul_mattes:x3270:3.3.12:ga7:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00197
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

ubuntu логотип

CVE-2012-5662

ubuntu
больше 11 лет назад

x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

redhat логотип

CVE-2012-5662

redhat
почти 13 лет назад

x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

debian логотип

CVE-2012-5662

debian
больше 11 лет назад

x3270 before 3.3.12ga12 does not verify that the server hostname match ...

github логотип

GHSA-mjjm-m83r-gv3w

github
больше 3 лет назад

x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

EPSS

Процентиль: 42%
0.00197
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310