Lucene search
MitreCVELIST:CVE-2017-1000209HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-1000209
2022-10-0316:23:09
mitre
www.cve.org
1
java
websocket
ssl/tls
0.001 Low
EPSS
Percentile
38.8%
The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject’s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate.
Related
nvd
nvd
CVE-2017-1000209
2017-11-17 02:29:01
cve
cve
CVE-2017-1000209
2022-10-03 16:23:09
github
github
osv
osv
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
2022-05-17 00:18:13
CVE-2017-1000209
2017-11-17 02:29:01
veracode
veracode
Man-in-the-Middle (MitM)
2017-11-17 10:21:58
prion
prion
Design/Logic Flaw
2017-11-17 02:29:00