Lucene search
Veracode Vulnerability DatabaseVERACODE:26005HistoryAug 03, 2020 - 3:08 a.m.
Improper SSL Certificate Verification
2020-08-0303:08:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.002
Percentile
58.5%
faye-websocket is vulnerable to improper SSL certificate validation. The vulnerability exists as it does not implement certificate verification by default, allowing any hostname in the wss: connection made by the Faye::WebSocket::Client to be made unvalidated.
Related
ubuntucve
ubuntucve
CVE-2020-15133
2020-07-31 00:00:00
osv
osv
CVE-2020-15133
2020-07-31 18:15:14
Missing TLS certificate verification in faye-websocket
2020-07-31 17:40:04
cve
cve
CVE-2020-15133
2020-07-31 18:15:14
rubygems
rubygems
Missing TLS certificate verification in faye-websocket
2020-07-30 21:00:00
cvelist
cvelist
CVE-2020-15133 Missing TLS certificate verification in Faye Websocket
2020-07-31 17:40:21
github
github
Missing TLS certificate verification in faye-websocket
2020-07-31 17:40:04
nvd
nvd
CVE-2020-15133
2020-07-31 18:15:14
prion
prion
Information disclosure
2020-07-31 18:15:00
debiancve
debiancve
CVE-2020-15133
2020-07-31 18:15:14
ibm
ibm