提出 #603712: Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Certificate Validation情報

タイトルComodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Certificate Validation
説明By default, Comodo Internet Security uses HTTPS connection to https://download.comodo.com/ to check for update. However, Comodo IS does not validate the SSL certificate of the connection, allowing a threat actor to perform a DNS spoofing attack to redirects update traffic to fake update server.
ソース⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
ユーザー
 FPT IS Security (UID 72751)
送信2025年06月25日 10:39 (10 月 ago)
モデレーション2025年07月05日 17:36 (10 days later)
ステータス承諾済み
VulDBエントリ315009 [Comodo Internet Security Premium 12.3.4.8162 Update 弱い認証]
ポイント18

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!