CVE-2012-5800

The CVE-2012-5800 entry concerns the PrestaShop eBay module failing to verify that the server hostname matches a domain in the certificate’s CN or subjectAltName. This weakens TLS authentication and allows man-in-the-middle attackers to spoof SSL servers using an arbitrary valid certificate. The ...