CVE-2016-3083

Apache Hive JDBC + HiveServer2 implements SSL for plain TCP and HTTP connections it supports both transport modes. While validating the server's certificate during the connection setup, the client in Apache Hive before 1.2.2 and 2.0.x before 2.0.1 doesn't seem to be verifying the common name...

PT-2017-8326

Name of the Vulnerable Software and Affected Versions Apache Hive versions prior to 1.2.2 Apache Hive versions 2.0.x prior to 2.0.1 Description The issue arises during the validation of the server's certificate in the connection setup. The client fails to verify the common name attribute of the...

Avast Antivirus X.509 Certificate Common Name Remote Command Execution

A remote command execution vulnerability has been reported in Avast Antivirus. The vulnerability is due to improper validation of X.509 certificates. Specifically, Avast does not sanitize the Common Name attribute of the X.509 certificates before rendering it as HTML...