Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-xydr-nxmx-wffp
Aliases:
CVE-2014-3596
GHSA-r53v-vm87-f72c
|
Improper Validation of Certificate with Host Mismatch
The `getCN` function in Apache Axis does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or `subjectAltName` field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the `CN` field.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|