Lucene search
GoogleOSV:GHSA-VFXC-R2GX-V2VQHistoryMay 24, 2022 - 4:46 p.m.
Hybrid Group Gobot Improper Certificate Validation vulnerability
2022-05-2416:46:55
Google
osv.dev
5
An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default.
Specific Go Packages Affected
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/hybridgroup/gobot | lt | 1.12.1-0.20190521122906-c1aa4f867846 |
Related
cvelist
cvelist
CVE-2019-12496
2019-05-31 10:59:23
nvd
nvd
CVE-2019-12496
2019-05-31 11:29:02
gitlab
gitlab
Improper Certificate Validation
2019-05-31 00:00:00
osv
osv
Improper certificate validation in github.com/hybridgroup/gobot
2021-04-14 20:04:52
CVE-2019-12496
2019-05-31 11:29:02
veracode
veracode
Weak Authentication
2019-06-03 10:29:18
github
github
Hybrid Group Gobot Improper Certificate Validation vulnerability
2022-05-24 16:46:55
cve
cve
CVE-2019-12496
2019-05-31 11:29:02
prion
prion
Default credentials
2019-05-31 11:29:00