Lucene search
HistoryDec 25, 2022 - 5:15 a.m.
CVE-2022-45197
slixmpp
ssl
certificate
validation
xmlstream
cve-2022-45197
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.9%
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Affected configurations
Node
slixmpp_projectslixmppRange<1.8.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| slixmpp_project:slixmpp | slixmpp project slixmpp | lt | 1.8.3 |
References
Social References
More
Related
mageia
mageia
Updated python-slixmpp packages fix security vulnerability
2022-12-17 21:48:08
nessus
nessus
Fedora 36 : python-slixmpp (2022-20a2dbdd45)
2022-12-22 00:00:00
GLSA-202305-07 : slixmpp: Insufficient Certificate Validation
2023-05-03 00:00:00
openSUSE 15 Security Update : python-slixmpp (openSUSE-SU-2022:10241-1)
2022-12-11 00:00:00
osv
osv
PYSEC-2022-43013
2022-12-25 05:15:00
Slixmpp lacks SSL Certificate hostname validation in XMLStream
2022-12-25 06:30:20
freebsd
freebsd
py-slixmpp -- incomplete SSL certificate validation
2022-12-25 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: python-slixmpp-1.8.3-1.fc37
2022-11-27 01:32:05
[SECURITY] Fedora 36 Update: python-slixmpp-1.8.3-1.fc36
2022-11-27 01:36:08
veracode
veracode
Improper Input Validation
2023-01-09 06:51:39
github
github
Slixmpp lacks SSL Certificate hostname validation in XMLStream
2022-12-25 06:30:20
prion
prion
Input validation
2022-12-25 05:15:00
openvas
openvas
Fedora: Security Advisory for python-slixmpp (FEDORA-2022-6720bd776b)
2022-11-27 00:00:00
Fedora: Security Advisory for python-slixmpp (FEDORA-2022-20a2dbdd45)
2022-11-27 00:00:00
Mageia: Security Advisory (MGASA-2022-0469)
2022-12-19 00:00:00
gentoo
gentoo
slixmpp: Insufficient Certificate Validation
2023-05-03 00:00:00
ubuntucve
ubuntucve
CVE-2022-45197
2022-12-25 00:00:00
nvd
nvd
CVE-2022-45197
2022-12-25 05:15:11
cvelist
cvelist
CVE-2022-45197
2022-12-25 00:00:00
debiancve
debiancve
CVE-2022-45197
2022-12-25 05:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.9%
Related for CVE-2022-45197