CVE-2014-3577

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

PT-2014-2058

Name of the Vulnerable Software and Affected Versions Apache HttpComponents HttpClient versions prior to 4.3.5 Apache HttpComponents HttpAsyncClient versions prior to 4.0.2 Description The issue is related to improper verification of SSL/TLS certificate authentication in the Apache HttpClient...