CVE-2012-5801

The CVE-2012-5801 entry concerns the PrestaShop PayPal module failing to verify the server hostname against the TLS certificate (CN/subjectAltName) during SSL handshakes via PHP fsockopen. This allows MITM spoofing with arbitrary valid certificates, impacting confidentiality and integrity (partia...