IDCVSSSummaryLast (major) updatePublished
CVE-2012-5780 5.8
The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary
20-11-2012 - 04:50 04-11-2012 - 22:55
Back to Top Mark selected
Back to Top