1 matches found
MGASA-2014-0548 Updated smack packages fix security vulnerabilities
Updated smack packages fix security vulnerabilities: The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers...
6.8CVSS6.3AI score0.0123EPSS
SaveExploits0References4
20