94 matches found
CVE-2020-8279
Missing validation of server certificates for out-going connections in Nextcloud Social 0.4.0 allowed a man-in-the-middle attack...
CVE-2008-1114
Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...
GO-2025-3649 Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
PT-2024-6616
Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.10.0 Description: The issue is related to the improper validation of server certificates when using the Certificate Status Request TLS extension, also known as OCSP stapling. If the returned status reports an error...
Toyoko Inn Security Breach
Toyoko Inn is a hotel chain app by the Japanese company Toyoko Inn. Toyoko Inn has a security vulnerability that stems from. , susceptible to incorrect server certificate validation, which could allow an attacker to conduct a man-in-the-middle attack to eavesdrop on encrypted communications...
PT-2023-7073 · Elastic · Apm Server +3
Name of the Vulnerable Software and Affected Versions: Beats affected versions not specified Elastic Agent affected versions not specified APM Server affected versions not specified Fleet Server affected versions not specified Description: The issue is related to errors in the TLS certificate...
JetBrains Ktor Trust Management Issues Vulnerability
The JetBrains Ktor framework is a web application framework from the Czech company JetBrains. A trust management issue vulnerability exists in JetBrains Ktor versions prior to 2.3.5, which stems from a failure to validate server certificates, resulting in a trust management issue vulnerability...
CVE-2023-21242
In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Privilege escalation
In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-3615
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...
CVE-2023-3615 Lack of server certificate validation in websockets connection
Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection...
undertow: Server identity in https connection is not checked by the undertow client
A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...
Motorola Ready For 信任管理问题漏洞
Motorola Ready For is a feature from Motorola USA. It enhances the functionality of a cell phone by connecting it to any display or monitor1,2. A security vulnerability exists in Motorola Ready For that stems from the application's inability to properly validate server certificates. An attacker...
CVE-2021-31892
A vulnerability has been identified in SINUMERIK Analyse MyCondition All versions, SINUMERIK Analyze MyPerformance All versions, SINUMERIK Analyze MyPerformance /OEE-Monitor All versions, SINUMERIK Analyze MyPerformance /OEE-Tuning All versions, SINUMERIK Integrate Client 02 All versions =...
CVE-2021-27899
The Proofpoint Insider Threat Management Agents formerly ObserveIT Agent for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are...
MongoDB Trust Management Issues Vulnerabilities
MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. MongoDB is vulnerable to a trust management issue that stems from not performing proper KMS server certificate validation...