The vulnerability of Firefox browsers on Android, related to errors in the TLS certificate validation process, allows attackers to execute arbitrary code.

The vulnerability of Firefox browsers for Android is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IBM Sterling Secure Proxy Trust Management Issue Vulnerability

IBM Sterling Secure Proxy is an application proxy used by International Business Machines Corporation IBM to secure the transfer of files in an organization's unprotected zone DMZ.IBM Sterling Secure Proxy version 6.0.3 and IBM Secure External Authentication Server version 6.0.3 contain a trust...

Google Android 信任管理问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a trust management issue vulnerability that stems from a certificate validation error in A-GPS. A remote attacker can exploit this vulnerability to perform MitM attacks...

Insecure Certificate Validation

wp-cli/wp-cli uses insecure certificate validation. The vulnerability exists due to an improper error handling in HTTPS requests management...

Elecom ELECOM WRC-300FEBK-S 信任管理问题漏洞

The ELECOM WRC-300FEBK-S is a network camera for the home from Elecom Japan. A certificate validation error vulnerability exists in the ELECOM WRC-300FEBK-S, which can be exploited by an attacker to alter the communication response and execute arbitrary commands on the product...

The vulnerability of Cisco Firepower Management Center’s software management system allows a intruder to trigger a service failure.

The vulnerability of Cisco Firepower Management Center’s software management system is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

openstack-octavia: amphora-agent not requiring client certificate

A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...

PT-2019-16930 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager versions 9.0.1 through 9.0.6 Description: The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle MITM attack due to incorrect certificate validation. Recommendations: For...

GLSA-201709-04 : mod_gnutls: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-201709-04 modgnutls: Certificate validation error It was discovered that the authentication hook in modgnutls does not validate clients certificates even when option GnuTLSClientVerify is set to require. Impact : A remote attacker...

CVE-2017-9599

The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

Overview The HP ArcSight SmartConnector fails to properly validate SSL certificates, and also contains a hard-coded password. Description CWE-295: Improper Certificate Validation - CVE-2015-2902The ArcSight SmartConnector fails to validate the certificate of the upstream Logger device it is...

IO::Socket::SSL: Certificate validation error

Background IO::Socket::SSL is a Perl class implementing an object oriented interface to SSL sockets. Description The vendor reported that IO::Socket::SSL does not properly handle Common Name CN fields. Impact A remote attacker might employ a specially crafted certificate to conduct...

GLSA-200910-01 : Wget: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-200910-01 Wget: Certificate validation error The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character. Specifically, the processing of such fields is...

OpenSSL: Certificate validation error

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description The Google Security Team reported that several functions incorrectly check the result after calling the...

Gentoo Security Advisory GLSA 200901-10 (gnutls)

The remote host is missing updates announced in advisory GLSA 200901-10. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...