The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

DEBIAN-CVE-2019-12855

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...

PT-2018-3492 · Twisted Matrix Laboratories +3 · Twisted +3

Name of the Vulnerable Software and Affected Versions: Twisted versions through 19.2.1 Description: The issue is related to the XMPP support in the words.protocols.jabber.xmlstream module of the Twisted network framework, which did not verify certificates when used with TLS. This allows an attack...