Vulnerability Details CVE-2019-12855
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.4%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 5.8
Products affected by CVE-2019-12855
-
cpe:2.3:a:twisted:twisted:-
-
cpe:2.3:a:twisted:twisted:10.0.0
-
cpe:2.3:a:twisted:twisted:10.1.0
-
cpe:2.3:a:twisted:twisted:10.2.0
-
cpe:2.3:a:twisted:twisted:11.0.0
-
cpe:2.3:a:twisted:twisted:11.1.0
-
cpe:2.3:a:twisted:twisted:12.0.0
-
cpe:2.3:a:twisted:twisted:12.1.0
-
cpe:2.3:a:twisted:twisted:12.2.0
-
cpe:2.3:a:twisted:twisted:12.3.0
-
cpe:2.3:a:twisted:twisted:13.0.0
-
cpe:2.3:a:twisted:twisted:13.1.0
-
cpe:2.3:a:twisted:twisted:13.2.0
-
cpe:2.3:a:twisted:twisted:14.0.0
-
cpe:2.3:a:twisted:twisted:14.0.1
-
cpe:2.3:a:twisted:twisted:14.0.2
-
cpe:2.3:a:twisted:twisted:15.0.0
-
cpe:2.3:a:twisted:twisted:15.1.0
-
cpe:2.3:a:twisted:twisted:15.2.0
-
cpe:2.3:a:twisted:twisted:15.2.1
-
cpe:2.3:a:twisted:twisted:15.3.0
-
cpe:2.3:a:twisted:twisted:15.4.0
-
cpe:2.3:a:twisted:twisted:15.5.0
-
cpe:2.3:a:twisted:twisted:16.0.0
-
cpe:2.3:a:twisted:twisted:16.1.0
-
cpe:2.3:a:twisted:twisted:16.1.1
-
cpe:2.3:a:twisted:twisted:16.2.0
-
cpe:2.3:a:twisted:twisted:16.3.0
-
cpe:2.3:a:twisted:twisted:16.3.1
-
cpe:2.3:a:twisted:twisted:16.3.2
-
cpe:2.3:a:twisted:twisted:16.4.0
-
cpe:2.3:a:twisted:twisted:16.4.1
-
cpe:2.3:a:twisted:twisted:16.5.0
-
cpe:2.3:a:twisted:twisted:16.6.0
-
cpe:2.3:a:twisted:twisted:17.1.0
-
cpe:2.3:a:twisted:twisted:17.5.0
-
cpe:2.3:a:twisted:twisted:17.9.0
-
cpe:2.3:a:twisted:twisted:18.4.0
-
cpe:2.3:a:twisted:twisted:18.7.0
-
cpe:2.3:a:twisted:twisted:18.9.0
-
cpe:2.3:a:twisted:twisted:19.2.0
-
cpe:2.3:a:twisted:twisted:19.2.1
-
cpe:2.3:a:twisted:twisted:8.0.0
-
cpe:2.3:a:twisted:twisted:8.0.1
-
cpe:2.3:a:twisted:twisted:8.1.0
-
cpe:2.3:a:twisted:twisted:8.2.0
-
cpe:2.3:a:twisted:twisted:9.0.0