CVE-2011-5236 in Moneris Eselect Plus
Resumen (Inglés)
Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Reservar
2012-11-06
Divulgación
2012-11-06
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 62872 | Moneris Eselect Plus escalada de privilegios | 20 | No está definido | No está definido | CVE-2011-5236 |