CVE-2012-1251

2012-06-0417:55:00

CWE-310

[email protected]

web.nvd.nist.gov

cve-2012-1251

opera

ssl

certificate verification

man-in-the-middle

5.7 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

34.4%

JSON

Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CPENameOperatorVersion
opera:opera_browseropera opera browsereq4.01
opera:opera_browseropera opera browsereq7.01
opera:opera_browseropera opera browsereq9.27
opera:opera_browseropera opera browsereq7.23
opera:opera_browseropera opera browsereq2.10
opera:opera_browseropera opera browsereq9.50
opera:opera_browseropera opera browsereq9.02
opera:opera_browseropera opera browsereq7.03
opera:opera_browseropera opera browsereq7.53
opera:opera_browseropera opera browsereq4.00

CPE	Name	Operator	Version
opera:opera_browser	opera opera browser	eq	4.01
opera:opera_browser	opera opera browser	eq	7.01
opera:opera_browser	opera opera browser	eq	9.27
opera:opera_browser	opera opera browser	eq	7.23
opera:opera_browser	opera opera browser	eq	2.10
opera:opera_browser	opera opera browser	eq	9.50
opera:opera_browser	opera opera browser	eq	9.02
opera:opera_browser	opera opera browser	eq	7.03
opera:opera_browser	opera opera browser	eq	7.53
opera:opera_browser	opera opera browser	eq	4.00