CVE-2004-2393

Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers…

published August 17, 2005

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02057 · 81.0th percentile
Published
2005-08-17T04:00Z
EPSS history
Timeline
  • 17 AUG 04:00Z
    Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers…
    cvelistv5