CVE-2011-5240 in Magento
Сводка (Английский)
Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Резервировать
06.11.2012
Раскрытие
06.11.2012
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 62876 | Magentocommerce Magento эскалация привилегий | 20 | Не определено | Не определено | CVE-2011-5240 |