제출 #603712: Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Certificate Validation정보

제목Comodo Security Solutions Comodo Internet Security Premium 12.3.4.8162 Improper Certificate Validation
설명By default, Comodo Internet Security uses HTTPS connection to https://download.comodo.com/ to check for update. However, Comodo IS does not validate the SSL certificate of the connection, allowing a threat actor to perform a DNS spoofing attack to redirects update traffic to fake update server.
원천⚠️ https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing
사용자
 FPT IS Security (UID 72751)
제출2025. 06. 25. AM 10:39 (10 개월 ago)
모더레이션2025. 07. 05. PM 05:36 (10 days later)
상태수락
VulDB 항목315009 [Comodo Internet Security Premium 12.3.4.8162 Update 약한 인증]
포인트들18

Interested in the pricing of exploits?

See the underground prices here!