CVE-2019-11777CWE-346

In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that…

published September 11, 2019

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00801 · 56.2th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2019-09-11T17:55Z
EPSS history
Timeline
  • 11 SEP 17:55Z
    In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that…
    cvelistv5