CVE-2012-5804

The CVE-2012-5804 entry concerns the CyberSource module in Ubercart, which does not verify the server hostname against the certificate’s CN or subjectAltName . This mismatch enables potential man-in-the-middle attacks by spoofing SSL servers with arbitrary valid certificates. No explicit exploit ...