Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11727
HistoryJan 15, 2019 - 9:06 a.m.

Man-in-the-Middle (MitM)

2019-01-1509:06:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

46.8%

gnutls is vulnerable to man-in-the-middle (MitM) attacks. The vulnerability exists as GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not yet valid or (2) no longer valid.