CVE-2018-4015
EUVD-2018-1580118.12.2018, 14:29
An exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud SDK. The configuration of the HTTP client does not enforce a secure connection by default, resulting in a failure to validate TLS certificates. An attacker could impersonate a remote BrightCloud server to exploit this vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| webroot | brightcloud | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration