CVE-2012-5789

The CVE-2012-5789 entry affects the PayPal Payments Standard PHP Library prior to 20120427. The root cause is failure to verify that the server hostname matches the domain name in the certificate’s CN or subjectAltName, enabling MITM-style spoofing via an arbitrary valid certificate due to a disa...