CVE-2012-5802

CVE-2012-5802 : The PayPal module in Ubercart does not verify that the server hostname matches the domain in the certificate’s CN or SAN, enabling man-in-the-middle attacks by spoofing SSL servers with any valid certificate. Affected: Ubercart PayPal integration. Root cause: missing hostname veri...