CVE-2016-3083

CVE-2016-3083 affects Apache Hive JDBC/HiveServer2: SSL is used for plain TCP and HTTP, but the client may fail to verify the certificate’s common name during the SSL handshake in Hive versions before 1.2.2 and 2.0.x before 2.0.1. This can allow a server presenting a valid CA-signed cert for a di...

Certificate Validation Bypass Due To SSL Vulnerability

hive-service is susceptible to certificate validation bypass. The client bypasses the validation of the common name attribute in the certificate of the server after sending an SSL request to it. Therefore, the client regards the certificate as a valid certificate and proceeds to the SSL handshake...

UBUNTU-CVE-2017-2800

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply ...

CVE-2017-2800

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution. In order to trigger this vulnerability, the attacker needs to supply ...

hammer_cli SSL Certificate Authentication Security Bypass Vulnerability

Hammer is a general-purpose clamp-based CLI framework from Foreman. hammer-cli provides only the core functionality. A SSL certificate authentication security bypass vulnerability exists in hammercli, which stems from the program failing to properly validate SSL certificates. An attacker could us...

PT-2017-15545 · Wolfssl · Wolfssl

Name of the Vulnerable Software and Affected Versions: wolfSSL versions 3.10.2 and earlier Description: A specially crafted x509 certificate can cause a single out of bounds byte overwrite, resulting in potential certificate validation issues, denial of service, and possible remote code execution...

Apple macOS Sierra EAP-TLS Certificate Validation Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A certificate validation vulnerability exists in Apple macOS EAP-TLS, which can be exploited by remote attackers to bypass security restrictions and obtain sensitive information...

Apple iOS Security Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. A security bypass vulnerability exists in the Security component of Apple iOS versions prior to 10.3.2. An attacker can exploit this vulnerability to...

CVE-2017-6988

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS...

CVE-2017-6988

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS...

CVE-2017-6988

CVE-2017-6988 is tied to macOS 10.12.x (affected: macOS Sierra up to 10.12.4; fixed in 10.12.5) and concerns the 802.1X/EAP-TLS certificate validation path. The root cause is mishandling certificate changes in EAP-TLS, enabling a remote attacker on a crafted 802.1X network to potentially capture ...

Quest Information Systems Indiana Voters app for iOS Authentication Vulnerability

Quest Information Systems Indiana Voters app for iOS is an Indiana voter registration mobile app for iOS developed by Quest Information Systems, Inc. An authentication vulnerability exists in version 1.1.24 of the Quest Information Systems Indiana Voters app for iOS, which stems from the program'...

PUMA PUMATRAC app for iOS Authentication Vulnerability

PUMA PUMATRAC app for iOS is a running management app from Puma Germany. The program has features such as recording running distance, speed and calories burned. An authentication vulnerability exists in version 3.0.2 of the PUMA PUMATRAC app for iOS, which stems from the program's failure to...

MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS Authentication Vulnerability

MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS is an iOS-based smartphone browser from MoboTap, Inc. An authentication vulnerability exists in the MoboTap Dolphin Web Browser - Fast Private Internet Search app versions 9.23.0 to 9.23.2 for iOS, which stems from the program...

Radio Javan app for iOS authentication vulnerability

Radio Javan app for iOS is an iOS-based audio playback application from Radio Javan. An authentication vulnerability exists in versions 9.3.4 through 9.6.1 of the Radio Javan app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. An...

YottaMark ShopWell - Healthy Diet and Grocery Food Scanner app for iOS Authentication Vulnerability

YottaMark ShopWell - Healthy Diet and Grocery Food Scanner app for iOS is a healthy diet management software from YottaMark ShopWell, USA. The app provides users with information about the ingredients of food products by scanning their barcodes. A security vulnerability exists in the iOS-based...

Zipongo - Healthy Recipes and Grocery Deals app for iOS Authentication Vulnerability

Zipongo - Healthy Recipes and Grocery Deals app for iOS is an IOS-based diet plan management app from Zipongo USA. An authentication vulnerability exists in versions of the Zipongo - Healthy Recipes and Grocery Deals app for iOS prior to version 6.3, which stems from the program failing to valida...

Google Chrome Security Bypass Vulnerability (CNVD-2017-07170)

Google Chrome is a web browser developed by the American company Google Google. A security bypass vulnerability exists in Google Chrome, which originates when the program caches a TLS session before validating a certificate. An attacker can exploit the vulnerability to decrypt TLS sessions...

Great Southern Bank Great Southern Mobile Banking app SSL Certificate Validation Vulnerability

The Great Southern Bank Great Southern Mobile Banking app allows you to conveniently complete financial transactions from your mobile device: check balances, transfer funds, pay bills, find branches and ATMs. A security vulnerability exists in the Great Southern Bank Great Southern Mobile Banking...

PayQuicker app SSL certificate validation vulnerability

PayQuicker app for iOS is a fast payment solution based on iOS. A security vulnerability exists in version 1.0.0 of the PayQuicker app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be exploited to conduct ...