presto-changeo Canada Post (aka canadapost) module for Prestashop

CPE Details

presto-changeo Canada Post (aka canadapost) module for Prestashop
presto-changeo
canadapost
-
2012-11-05
17h17 +00:00
2012-11-13
22h57 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:presto-changeo:canadapost:-:*:*:*:*:*:*:*

Informations

Vendor

presto-changeo

Product

canadapost

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-5799 2012-11-04 22h00 +00:00 The Canada Post (aka CanadaPost) module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function.
5.8