7 matches found
CVE-2023-50454
An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers...
USN-4405-1: GLib Networking vulnerability
It was discovered that glib-networking skipped hostname certificate verification if the application failed to specify the server identity. A remote attacker could use this to perform a person-in-the-middle attack and expose sensitive information...
CVE-2014-2901
wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...
CVE-2014-2901
wolfssl before 3.2.0 does not properly issue certificates for a server's hostname...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...
CVE-2012-6071
nuSOAP before 0.7.3-5 does not properly check the hostname of a cert...