CVE-2012-5524

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct…

published February 8, 2014

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01148 · 66.4th percentile
Published
2014-02-08T00:00Z
EPSS history
Timeline
  • 08 FEB 00:00Z
    The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct…
    cvelistv5