Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-5825
HistoryNov 04, 2012 - 12:00 a.m.

CVE-2012-5825

2012-11-0400:00:00
ubuntu.com
ubuntu.com
8

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.001

Percentile

39.6%

Tweepy does not verify that the server hostname matches a domain name in
the subject’s Common Name (CN) or subjectAltName field of the X.509
certificate, which allows man-in-the-middle attackers to spoof SSL servers
via an arbitrary valid certificate, related to use of the Python httplib
library.

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

0.001

Percentile

39.6%