CVE-2019-11777

🗓️ 11 Sep 2019 17:55:21Reported by eclipseType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 135 Views

Insecure TLS hostname verification in Eclipse Paho Java client librar

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to spoofing due to a flaw in Eclipse Paho, used by IBM WebSphere Application Server Liberty (CVE-2019-11777)	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to spoofing due to Eclipse Paho (CVE-2019-11777)	14 Jul 202216:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to spoofing due to a flaw in Eclipse Paho, used by IBM WebSphere Application Server Liberty (CVE-2019-11777)	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to spoofing due to Eclipse Paho (CVE-2019-11777)	14 Jul 202216:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Tivoli Netcool Impact (CVE-2019-11777)	6 Oct 202204:36	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Asset analyzer is vulnerable to spoofing due to Eclipse Paho (CVE-2019-11777)	6 Sep 202223:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to identity spoofing with authenticated user and ability to bypass security restrictions due to Eclipse Paho Java client (CVE-2019-11777, CVE-2022-22476)	12 Sep 202223:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Eclipse Paho Java client library	20 Mar 202607:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty may affect IBM Spectrum Protect Plus (CVE-2019-11777)	21 Feb 202317:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Toolkit and Intregation Bus for z/OS Toolkit are vulnerable to an Origin Validation Error due to Paho Java Client ( CVE-2019-11777 )	16 Sep 202504:47	–	ibm

NVD

Node

eclipse paho_java_clientMatch1.2.0

[
  {
    "product": "Eclipse Paho",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0"
      }
    ]
  }
]

Source	Link
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi

21 Nov 2024 04:21Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.01278