CVE-2019-12496

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

Hybrid Group Gobot Improper Certificate Validation vulnerability

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default. Specific Go Packages Affected github.com/hybridgroup/gobot/platforms/mqtt...

GHSA-VFXC-R2GX-V2VQ Hybrid Group Gobot Improper Certificate Validation vulnerability

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default. Specific Go Packages Affected github.com/hybridgroup/gobot/platforms/mqtt...

GO-2021-0083 Improper certificate validation in github.com/hybridgroup/gobot

TLS certificate verification is skipped when connecting to a MQTT server. This allows an attacker who can MITM the connection to read, or forge, messages passed between the client and server...

CVE-2019-12496

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

CVE-2019-12496

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

Default credentials

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

CVE-2019-12496

Hybrid Group Gobot (github.com/hybridgroup/gobot) has a vulnerability CVE-2019-12496 in versions before 1.13.0 where the mqtt subsystem skips verification of root CA certificates by default. This permits a man-in-the-middle attacker to read or forge messages between the MQTT client and server. Af...

CVE-2019-12496

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default...

Improper Certificate Validation

An issue was discovered in Hybrid Group Gobot. The mqtt subsystem skips verification of root CA certificates by default...

PT-2019-12825 · Hybrid · Gobot

Name of the Vulnerable Software and Affected Versions: Hybrid Group Gobot versions prior to 1.13.0 Description: The issue concerns the mqtt subsystem skipping verification of root CA certificates by default, allowing an attacker who can perform a man-in-the-middle MITM attack to read or forge...