Ignite Realtime Smack API 4.0.1

CPE Details

Ignite Realtime Smack API 4.0.1
igniterealtime
smack_api
4.0.1
2014-12-18
13h16 +00:00
2015-02-12
00h17 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:igniterealtime:smack_api:4.0.1:*:*:*:*:*:*:*

Informations

Vendor

igniterealtime

Product

smack_api

Version

4.0.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2014-5075 2014-10-25 19h00 +00:00 The Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
6.8