CVE-2011-5242
06.11.2012, 12:21
tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Enginsight
| Vendor | Product | Version |
|---|---|---|
| themattharris | tmhoauth | 𝑥 ≤ 0.60 |
| themattharris | tmhoauth | 0.2 |
| themattharris | tmhoauth | 0.3 |
| themattharris | tmhoauth | 0.4 |
| themattharris | tmhoauth | 0.5 |
| themattharris | tmhoauth | 0.11 |
| themattharris | tmhoauth | 0.12 |
| themattharris | tmhoauth | 0.13 |
| themattharris | tmhoauth | 0.14 |
| themattharris | tmhoauth | 0.51 |
| themattharris | tmhoauth | 0.52 |
| themattharris | tmhoauth | 0.53 |
| themattharris | tmhoauth | 0.54 |
| themattharris | tmhoauth | 0.55 |
| themattharris | tmhoauth | 0.56 |
| themattharris | tmhoauth | 0.57 |
| themattharris | tmhoauth | 0.58 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration