EUVD-2020-5860

Malware in sbrugna...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

SUSE CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

Qore Trust Management Issues Vulnerabilities

Qore is an embedded multithreaded scripting programming language. A trust management issue vulnerability exists in the lib/QoreSocket.cpp file in versions of Qore prior to 0.9.4.2, which stems from the program failing to validate the hostname of an X.509 certificate. No details of the vulnerabili...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615

CVE-2020-13615 affects Qore up to version 0.9.4.2; the root cause is missing hostname verification for X.509 certificates in lib/QoreSocket.cpp. This constitutes a trust-management vulnerability in TLS connections. Remediation/mitigation: upgrade to Qore 0.9.4.2 or later (as indicated by Red Hat/...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

CVE-2020-13615: Improper Certificate Validation

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

PT-2020-13616

Name of the Vulnerable Software and Affected Versions Qore versions prior to 0.9.4.2 Description The issue is related to a lack of hostname verification for X.509 certificates in the lib/QoreSocket.cpp file. This could potentially allow for certain types of attacks. Recommendations For versions...