CVE-2015-2674

Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrapsocket function in Python with the default CERTNONE value for the certreqs argument...

CVE-2015-2674

CVE-2015-2674 affects Restkit written in Python, where TLS server verification can be bypassed by using ssl.wrap_socket with cert_reqs set to CERT_NONE, enabling MITM spoofing. The vulnerability is caused by the default no-verification configuration in SSL/TLS handling within Restkit and is docum...