Exploit for Improper Certificate Validation in Squareup Okhttp

🗓️ 20 Mar 2016 18:04:40Reported by ikozType

githubexploit🔗 github.com👁 3 Views

Improper certificate validation in OkHttp allows bypassing certificate pinning.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product	20 May 202014:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®	19 Apr 202116:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics	29 Apr 202501:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	26 Mar 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	10 Mar 202121:20	–	ibm
Atlassian	OkHttp Certificate Pinning Vulnerability CVE-2016-2402	27 Feb 202009:43	–	atlassian
Atlassian	OkHttp Certificate Pinning Vulnerability CVE-2016-2402	27 Feb 202009:43	–	atlassian
BDU FSTEC	The vulnerability of the client’s HTTP library, OKHttp Square, related to authentication process errors allows attackers to circumvent existing security restrictions and execute “man-in-the-middle” attacks.	2 Aug 202200:00	–	bdu_fstec
CNVD	Square OkHttp Security Bypass Vulnerability	27 Feb 201600:00	–	cnvd
CVE	CVE-2016-2402	30 Jan 201722:00	–	cve

15 May 2019 08:00Current

CVSS 24.3

CVSS 3.15.9

EPSS0.02249

OkHttp certificate validation certificate pinning bypass