CVE-2012-5819

FilesAnywhere is affected by a TLS hostname verification issue: the client does not verify that the server hostname matches the domain name in the certificate’s CN or subjectAltName. This allows potential MITM attackers to spoof SSL servers using an arbitrary valid certificate. The public records...

CVE-2012-5819

FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...