CVE-2012-5803

The CVE-2012-5803 entry concerns the Authorize.Net module in Ubercart failing to verify that the server hostname matches a domain in the certificate’s CN or subjectAltName. This misconfiguration enables man-in-the-middle attackers to spoof SSL servers using arbitrary valid certificates. The descr...