Поиск уязвимостей
Количество 6
Количество 6
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2013-2037
httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, ...
GHSA-q48q-77qv-cf9p
httplib2 incorrectly checks SSL certificate
ALT-PU-2014-3195
ALT-PU-2014-3195: package `python-module-httplib2` update to version 0.9-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2013-2037 httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
 | CVE-2013-2037 httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 5 | 1% Низкий | больше 13 лет назад |
 | CVE-2013-2037 httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
| CVE-2013-2037 httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, ... | CVSS2: 2.6 | 1% Низкий | почти 13 лет назад |
| GHSA-q48q-77qv-cf9p httplib2 incorrectly checks SSL certificate | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2014-3195 ALT-PU-2014-3195: package `python-module-httplib2` update to version 0.9-alt1 | CVSS2: 2.6 | 1% Низкий | около 12 лет назад |
Уязвимостей на страницу