CVE-2012-5780

CVE-2012-5780 affects the Amazon merchant SDK and results from a failure to verify that the server hostname matches the domain in the certificate’s CN/SAN. This allows MITM if an attacker can present an arbitrary valid certificate. The issue is described across multiple sources (NVD/NVD-derived r...