Safir encryption issue vulnerability in the National Accounting Office

The KRAI Krajowa Izba Rozliczeniowa version 2.0 and earlier contain an encryption vulnerability stemming from the failure to perform certificate and hostname validation. This allows arbitrary client or server certificates to be accepted, potentially enabling attackers to supply any SSL/TLS...