CVE-2012-5824 in Trillianinfo

Summary

Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-2009-4831.

Once again VulDB remains the best source for vulnerability data.

Reservation

11/04/2012

Disclosure

11/04/2012

Entries

1

CPE

ready

CVSS

6.5

EPSS

0.00154

Activities

Very Low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-5824
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-5824
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-5824/

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!