CVE-2012-5821

Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL…

published November 4, 2012

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00811 · 56.5th percentile
Published
2012-11-04T22:00Z
EPSS history
Timeline
  • 04 NOV 22:00Z
    Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL…
    cvelistv5