PT-2012-6110

Name of the Vulnerable Software and Affected Versions osCommerce PayPal Pro PayFlow EC module affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6102

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library version 20120427 Description The issue arises from the library's failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6125

Name of the Vulnerable Software and Affected Versions Android Pusher library for Android affected versions not specified Description The issue concerns a lack of verification in the Android Pusher library that the server hostname matches a domain name in the subject's Common Name CN or...

PT-2012-6131 · Filesanywhere · Filesanywhere

Name of the Vulnerable Software and Affected Versions: FilesAnywhere affected versions not specified Description: The issue arises from FilesAnywhere not verifying that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This...

PT-2012-6122 · Jpmorgan Chase · Chase Mobile Banking Application

Name of the Vulnerable Software and Affected Versions: Chase mobile banking application for Android affected versions not specified Description: The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. Th...

PT-2012-6093

Name of the Vulnerable Software and Affected Versions Amazon Elastic Load Balancing API Tools affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6103

Name of the Vulnerable Software and Affected Versions PayPal Invoicing affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6127

Name of the Vulnerable Software and Affected Versions Rackspace app version 2.1.5 Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because the app does not verify that the server hostname matches a domain name in the subject's Common...

PT-2012-6120

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the LinkPoint module in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6097

Name of the Vulnerable Software and Affected Versions Apache Axis2/Java versions 1.6.2 and earlier Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because it does not verify that the server hostname matches a domain name in the...

UBUNTU-CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle...

PT-2012-6095

Name of the Vulnerable Software and Affected Versions Apache Commons HttpClient versions 3.x Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6137

Name of the Vulnerable Software and Affected Versions Tweepy affected versions not specified Description The issue arises from Tweepy's failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6099

Name of the Vulnerable Software and Affected Versions PayPal merchant SDK affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

CVE-2012-5811: Undefined Security Weakness

The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2012-6092

Name of the Vulnerable Software and Affected Versions Amazon merchant SDK affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. This allows man-in-the-middle...

PT-2012-6101

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library versions before 20120427 Description The issue is related to the intentional disabling of certificate-validation checks, allowing man-in-the-middle attackers to spoof SSL servers via an arbitrary valid...

PT-2012-6126

Name of the Vulnerable Software and Affected Versions Weberknecht affected versions not specified Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6118

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the PayPal Payments Pro module in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of th...

PT-2012-4719 · Apache · Apache Libcloud

Name of the Vulnerable Software and Affected Versions: Apache Libcloud versions prior to 0.11.1 Description: The issue arises from an incorrect regular expression used during the verification process of whether the server hostname matches a domain name in the subject's Common Name CN or...