Lucene search
Veracode Vulnerability DatabaseVERACODE:5454HistoryNov 17, 2017 - 10:21 a.m.
Man-in-the-Middle (MitM)
2017-11-1710:21:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
38.8%
nv-websocket-client is vulnerable to man-in-the-middle (MitM) attacks. The library accepts a trusted certificate issued to domain A when connecting to domain B, allowing a malicious user to conduct a man-in-the-middle attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nv-websocket-client | eq | 2.0 | |
| nv-websocket-client | le | 1.31 |
Related
nvd
nvd
CVE-2017-1000209
2017-11-17 02:29:01
cve
cve
CVE-2017-1000209
2022-10-03 16:23:09
cvelist
cvelist
CVE-2017-1000209
2022-10-03 16:23:09
github
github
osv
osv
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
2022-05-17 00:18:13
CVE-2017-1000209
2017-11-17 02:29:01
prion
prion
Design/Logic Flaw
2017-11-17 02:29:00