EUVD-2020-5861

Malware in sbrugna...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

Pichi Trust Management Issues Vulnerabilities

Pichi is a rule-based proxy software. A security vulnerability in the boost ASIO wrapper in the net/asio.cpp file in versions prior to Pichi 1.3.0 stems from the program's failure to check for TLS hostnames. No details of the vulnerability are provided at this time...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

Design/Logic Flaw

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

CVE-2020-13616

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification...

CVE-2020-13616

CVE-2020-13616 affects Pichi prior to 1.3.0: the boost ASIO wrapper in net/asio.cpp does not verify TLS hostnames, enabling hostname validation bypass over TLS. CVSS data from NVD indicates a Network attack vector with MEDIUM base impact for confidentiality (PARTIAL) and no integrity/availability...