CVE-2018-17215

Postman (standalone) up to version 6.3.0 contains an information-disclosure vulnerability due to improper X.509 certificate validation. When a certificate is invalid, Postman still sends the associated HTTPS request data; however, only the response is suppressed from display. This can allow a man...

CVE-2018-17215

An information-disclosure issue was discovered in Postman through 6.3.0. It validates a server's X.509 certificate and presents an error if the certificate is not valid. Unfortunately, the associated HTTPS request data is sent anyway. Only the response is not displayed. Thus, all contained...

PT-2018-13950 · Postman · Postman

Name of the Vulnerable Software and Affected Versions: Postman versions through 6.3.0 Description: An information-disclosure issue was discovered in Postman. It validates a server's X.509 certificate and presents an error if the certificate is not valid. Unfortunately, the associated HTTPS reques...

Postman 6.3.0 Improper Certificate Validation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2018-016 Product: Postman standalone Manufacturer: Postman Affected Versions: 6.3.0 and older Tested Versions: 6.2.2 x64 Windows and Linux, 6.3.0 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: Medium Soluti...

Postman 6.3.0 Improper Certificate Validation Vulnerability

Exploit for hardware platform in category web applications Product: Postman standalone Manufacturer: Postman Affected Versions: 6.3.0 and older Tested Versions: 6.2.2 x64 Windows and Linux, 6.3.0 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: Medium Solution Status: Open...

Postman SMTP Mailer/Email Log - Cross-Site Scripting (XSS)

The postman-smtp WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...