CVE-2016-10937

IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...

CVE-2016-10937

IMAPFilter up to version 2.6.12 did not validate hostnames in SSL certificates, enabling potential MITM during TLS handshakes. Several connected advisories show the fix was released in version 2.6.16, adding proper SSL hostname validation (CVE-2016-10937). Affected releases across distros (openSU...

CVE-2016-10937: Improper Certificate Validation

IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate...

PT-2019-20110

Name of the Vulnerable Software and Affected Versions Python versions 3.7 and newer Description The issue arises from the inet aton function accepting trailing characters after a valid IP, which can lead to incorrect validation of hostnames and IP addresses in certificates. This can potentially...

Apache Tomcat 9.0.x < 9.0.10 Security Misconfiguration

Binary data 700707.pasl...

Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

GHSA-W4G2-9HJ6-5472 Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

Input validation

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

CVE-2018-11087

CVE-2018-11087 affects Pivotal Spring AMQP and RabbitMQ amqp-client. The issue arises from improper hostname validation, enabling a man-in-the-middle attacker to intercept traffic and view data in transit. Documented impact includes information disclosure due to lack of hostname verification. IBM...

CVE-2018-11087 TLS validation error

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

PT-2018-10299

Name of the Vulnerable Software and Affected Versions Pivotal Spring AMQP versions 1.x prior to 1.7.10 Pivotal Spring AMQP versions 2.x prior to 2.0.6 Description The issue exposes a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to...

CVE-2018-11087: Improper Certificate Validation

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit...

Man-in-the-Middle (MitM)

spring-rabbit is vulnerable to man-in-the-middle attacks. The Spring RabbitMQ Java client does not perform SSL hostname validation and accepts SSL certificates as long as they are trusted. This allows attackers to perform man-in-the-middle attacks between the RabbitMQ Java client and server...

Apache ActiveMQ Security Restriction Bypass Vulnerability

Apache ActiveMQ Client is the United States Apache Apache Software Foundation developed a set of open-source messaging middleware client program , which supports Java messaging services , clustering , Spring Framework and so on. Apache ActiveMQ Client 5.15.6 before the version of a security...

DEBIAN-CVE-2016-7075

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate...

Red Hat Satellite Spoofing Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in Red Hat Satellite version 5, which stem...

Apache CXF Authentication Bypass Vulnerability

Apache CXF is the United States Apache Apache Software Foundation of an open source Web services framework. The framework supports a variety of Web services standards , a variety of front-end programming APIs. A security vulnerability exists in Apache CXF versions prior to 3.2.5 and 3.1.16, which...