CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-5242

tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.2%

CVSS Severity

CVSS v2 Score 5.8

References

Products affected by CVE-2011-5242

Themattharris » Tmhoauth » Version: Any

cpe:2.3:a:themattharris:tmhoauth:*
Themattharris » Tmhoauth » Version: 0.11

cpe:2.3:a:themattharris:tmhoauth:0.11
Themattharris » Tmhoauth » Version: 0.12

cpe:2.3:a:themattharris:tmhoauth:0.12
Themattharris » Tmhoauth » Version: 0.13

cpe:2.3:a:themattharris:tmhoauth:0.13
Themattharris » Tmhoauth » Version: 0.14

cpe:2.3:a:themattharris:tmhoauth:0.14
Themattharris » Tmhoauth » Version: 0.2

cpe:2.3:a:themattharris:tmhoauth:0.2
Themattharris » Tmhoauth » Version: 0.3

cpe:2.3:a:themattharris:tmhoauth:0.3
Themattharris » Tmhoauth » Version: 0.4

cpe:2.3:a:themattharris:tmhoauth:0.4
Themattharris » Tmhoauth » Version: 0.5

cpe:2.3:a:themattharris:tmhoauth:0.5
Themattharris » Tmhoauth » Version: 0.51

cpe:2.3:a:themattharris:tmhoauth:0.51
Themattharris » Tmhoauth » Version: 0.52

cpe:2.3:a:themattharris:tmhoauth:0.52
Themattharris » Tmhoauth » Version: 0.53

cpe:2.3:a:themattharris:tmhoauth:0.53
Themattharris » Tmhoauth » Version: 0.54

cpe:2.3:a:themattharris:tmhoauth:0.54
Themattharris » Tmhoauth » Version: 0.55

cpe:2.3:a:themattharris:tmhoauth:0.55
Themattharris » Tmhoauth » Version: 0.56

cpe:2.3:a:themattharris:tmhoauth:0.56
Themattharris » Tmhoauth » Version: 0.57

cpe:2.3:a:themattharris:tmhoauth:0.57
Themattharris » Tmhoauth » Version: 0.58

cpe:2.3:a:themattharris:tmhoauth:0.58

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-5242

Products

Pricing

Contact Us