RSS   Vulnerabilities for 'Merchant sdk'   RSS

2012-11-04
 
CVE-2012-5780

CWE-20
 

 
The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

 

 >>> Vendor: Amazon 26 Products
Kindle touch
Kindle for pc
Merchant sdk
Elastic load balancing api tools
Flexible payments service
Ec2 api tools java library
Kindle
Fire os
Amazon key firmware
Amazon music
Payfort
Payfort-php-sdk
Amazon web services freertos
Freertos
Amazon web services software development kit
Freertos\+fat
Audible
Firecracker
Aws-lambda
Aws javascript s3 explorer
Tough
Aws s3 crypto sdk
Workspaces
Sockeye
Aws opensearch
Aws client vpn


Copyright 2022, cxsecurity.com

 

Back to Top