CVE-2012-5814 in Gaug.esinfo

Summary

Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

11/04/2012

Disclosure

11/04/2012

CPE

ready

CVSS

6.5

EPSS

0.00134

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!