CVE-2011-5243 in TwitterOAuth
Сводка (Английский)
TwitterOAuth does not verify that the server hostname matches a domain name in the subject s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
06.11.2012
Раскрытие
06.11.2012
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 62879 | Abraham Williams TwitterOAuth эскалация привилегий | 20 | Не определено | Не определено | CVE-2011-5243 |