Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.


Apple Safari detects http content in https web pages only when the top-level frame uses https which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying an http page to include an https iframe that references a script file on an http site related to \HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\


Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response aka an \SSL tampering\ attack.


Opera possibly before 9.25 processes a 3xx HTTP CONNECT response before a successful SSL handshake which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.


Mozilla Network Security Services (NSS) before 3.12.3 Firefox before 3.0.13 Thunderbird before 2.0.0.23 and SeaMonkey before 1.1.18 do not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority. NOTE: this was originally reported for Firefox before 3.5.


Opera detects http content in https web pages only when the top-level frame uses https which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying an http page to include an https iframe that references a script file on an http site related to \HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\


socket.c in fetchmail before 6.3.11 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


KDE KSSL in kdelibs 3.5.4 4.2.4 and 4.3 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.


Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.


Certificate Assistant in Apple Mac OS X before 10.6.2 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Mozilla Firefox 3.0.10 and possibly other versions detects http content in https web pages only when the top-level frame uses https which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying an http page to include an https iframe that references a script file on an http site related to \HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\


src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


neon before 0.28.6 when OpenSSL or GnuTLS is used does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


The CryptoAPI component in Microsoft Windows 2000 SP4 Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista Gold SP1 and SP2 Windows Server 2008 Gold SP2 and R2 and Windows 7 as used by Internet Explorer and other applications does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority aka \Null Truncation in X.509 Common Name Vulnerability \ a related issue to CVE-2009-2408.


Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request and then sending the browser a crafted 502 response page upon a subsequent request.


Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response aka an \SSL tampering\ attack.


Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request and then sending the browser a crafted 502 response page upon a subsequent request.


Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request and then sending the browser a crafted 502 response page upon a subsequent request.


Opera possibly before 9.25 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response aka an \SSL tampering\ attack.


Google Chrome detects http content in https web pages only when the top-level frame uses https which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying an http page to include an https iframe that references a script file on an http site related to \HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\


in

Google

Chrome

before

uses

the

HTTP

Host

header

to

determine

the

context

of

a

document

provided

in

a

or

CONNECT

response

from

a

proxy

server

which

allows

man-in-the-middle

attackers

to

execute

arbitrary

web

script

by

modifying

this

CONNECT

response

aka

an

\SSL

tampering\

attack.


lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5 when OpenSSL is used does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Microsoft Internet Explorer 8 and possibly other versions detects http content in https web pages only when the top-level frame uses https which allows man-in-the-middle attackers to execute arbitrary web script in an https site's context by modifying an http page to include an https iframe that references a script file on an http site related to \HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\


libgnutls in GnuTLS before 2.8.2 does not properly handle a '\\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative Name (SAN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.


Martin Lambers mpop before 1.0.19 when OpenSSL is used does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19 when OpenSSL is used does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.


Apple Safari possibly before 4.0.3 on Mac OS X does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Opera before 10.00 does not properly handle a (1) '\\0' character or (2) invalid wildcard character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.


GNU Wget before 1.12 does not properly handle a '\\0' character in a domain name in the Common Name field of an X.509 certificate which allows man-in-the-middle remote attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


In RHEV-M VDC 2.2.0 it was found that the SSL certificate was not verified when using the client-side Red Hat Enterprise Virtualization Manager interface (a Windows Presentation Foundation (WPF) XAML browser application) to connect to the Red Hat Enterprise Virtualization Manager. An attacker on the local network could use this flaw to conduct a man-in-the-middle attack tricking the user into thinking they are viewing the Red Hat Enterprise Virtualization Manager when the content is actually attacker-controlled or modifying actions a user requested Red Hat Enterprise Virtualization Manager to perform.


Opera before 10.00 trusts root X.509 certificates signed with the MD2 algorithm which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted server certificate.


libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4 and possibly other versions when OpenSSL is used does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1 when using PKIX trust validation does not properly handle a '\\0' character in the subject or subjectAltName fields of a certificate which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


Google Chrome possibly 3.0.195.21 and earlier does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Martin Lambers msmtp before 1.4.19 when OpenSSL is used does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


mutt_ssl.c in mutt 1.5.19 and 1.5.20 when OpenSSL is used does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173 4.6.0 before 4.6.0.303 4.6.1 before 4.6.1.309 4.7.0 before 4.7.0.179 and 4.7.1 before 4.7.1.57 does not properly handle \hidden\ characters including a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


iPhone Mail in Apple iPhone OS and iPhone OS for iPod touch does not validate X.509 certificates which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.


The TLS protocol and the SSL protocol 3.0 and possibly earlier as used in Microsoft Internet Information Services (IIS) 7.0 mod_ssl in the Apache HTTP Server 2.2.14 and earlier OpenSSL before 0.9.8l GnuTLS 2.8.5 and earlier Mozilla Network Security Services (NSS) 3.12.4 and earlier multiple Cisco products and other products does not properly associate renegotiation handshakes with an existing connection which allows man-in-the-middle attackers to insert data into HTTPS sessions and possibly other types of sessions protected by TLS or SSL by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context related to a \plaintext injection\ attack aka the \Project Mogul\ issue.


The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code or (2) gain access to machines connected to the switch by hijacking a session.


Mutt 1.5.19 when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c) allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.


Mozilla Firefox before 3.0.11 Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response aka an \SSL tampering\ attack.


The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation which makes it easier for remote attackers to (a) decrypt network traffic or (b) conduct man-in-the-middle attacks by repeating unspecified \client-side calculations.\


The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows when SSL is used allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors.


The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.


Windows DNS Server in Microsoft Windows 2000 SP4 Server 2003 SP1 and SP2 and Server 2008 when dynamic updates are enabled does not restrict registration of the \wpad\ hostname which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) feature and conduct man-in-the-middle attacks by spoofing a proxy server via a Dynamic Update request for this hostname aka \DNS Server Vulnerability in WPAD Registration Vulnerability \ a related issue to CVE-2007-1692.


OpenSSL probably 0.9.6 does not verify the Basic Constraints for an intermediate CA-signed certificate which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack a related issue to CVE-2002-0970.


The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) \wpad\ and (2) \isatap\ NetBIOS names which allows remote authenticated users to hijack the Web Proxy Auto-Discovery (WPAD) and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) features and conduct man-in-the-middle attacks by spoofing a proxy server or ISATAP route by registering one of these names in the WINS database aka \WPAD WINS Server Registration Vulnerability \ a related issue to CVE-2007-1692.


sendmail before 8.14.4 does not properly handle a '\\0' character in a Common Name (CN) field of an X.509 certificate which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


MySQL Connector/NET before 6.0.4 when using encryption does not verify SSL certificates during connection which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.


PostgreSQL 7.4.x before 7.4.27 8.0.x before 8.0.23 8.1.x before 8.1.19 8.2.x before 8.2.15 8.3.x before 8.3.9 and 8.4.x before 8.4.2 does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based PostgreSQL servers via a crafted server certificate issued by a legitimate Certification Authority and (2) allows remote attackers to bypass intended client-hostname restrictions via a crafted client certificate issued by a legitimate Certification Authority a related issue to CVE-2009-2408.


The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 when OpenSSL is used accepts a value of zero for the depth of X.509 certificates which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate as demonstrated by a certificate presented by a server linked against the yaSSL library.


Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.


The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.


Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates which could allow remote attackers to spoof certificates via a man-in-the-middle attack.


Dark Age of Camelot before 1.68 live patch does not sign the RSA public key which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack.


SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack or (2) obtain the database password via a GetConnection request to TCP port 1707.


The KAME IKE Daemon Racoon when authenticating a peer during Phase 1 validates the X.509 certificate but does not verify the RSA signature authentication which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid trusted X.509 certificate.


IBM QRadar SIEM 7.2.8 and 7.3 does not validate or incorrectly validates a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.


IBM Security Guardium 10.0 10.0.1 10.1 10.1.2 10.1.3 10.1.4 and 10.5 does not validate or incorrectly validates a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) techniques. IBM X-Force ID: 124740.


IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate or incorrectly validates a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.


Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack.


A flaw was found in the way samba client before samba 4.4.16 samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.


A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server.


It was found that samba before 4.4.16 4.5.x before 4.5.14 and 4.6.x before 4.6.8 did not enforce \SMB signing\ when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.


SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesEncrypt and aesDecrypt methods in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers.


A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software. Cisco Bug IDs: CSCvc33171.


An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Version 1.1 1.5 and 1.6. The pump does not validate host certificates leaving the pump vulnerable to a man-in-the-middle (MITM) attack.


The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the \Mail Drafts\ component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption.


An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the \APNs Server\ component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates.


Hi Security Virus Cleaner - Antivirus Booster 3.7.1.1329 2017-09-13 Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker.


An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the \APNs\ component. It allows man-in-the-middle attackers to track users by leveraging the transmission of client certificates.


Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition the attacker can execute system commands remotely by abusing pre-backup events.


An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android through 0.0.80w for Web and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.


When linking a Nessus scanner or agent to Tenable.io or other manager Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.


Hammer CLI a CLI utility for Foreman before version 0.10.0 did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.


The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to perform a man-in-the-middle attack thereby stealing authentic credentials from encrypted paths which are easily decrypted and subsequently gain complete control of the system.


Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the \iTunes Store\ component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveraging use of cleartext HTTP.


In the trapper functionality of Zabbix Server 2.4.x specifically crafted trapper packets can pass database logic checks resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.


The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated unprivileged network-based attacker to cause various system services partial to full denials of services modification of system states and files and potential disclosure of sensitive information which may assist the attacker in further attacks on the system through the use of multiple attack vectors including man-in-the-middle attacks file injections and malicious execution of commands causing out of bound memory conditions leading to other attacks.


An issue was discovered in certain Apple products. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. The issue involves cleartext client-certificate transmission in the \APNs Server\ component. It allows man-in-the-middle attackers to track users via correlation with this certificate.


An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the \Keychain\ component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging lack of authentication for OTR packets.


The RBB SPEED TEST App for Android version 2.0.3 and earlier RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.


The Go SSH library (x/crypto/ssh) by default does not verify host keys facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.


A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee update via the HTTP backend-response.


Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections which may enable an attacker to conduct man-in-the-middle (MITM) attacks.


Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly validate SSL certificates provided by HTTPS connections which may enable an attacker to conduct man-in-the-middle (MITM) attacks.


The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


On the iOS platform the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections which may allow an attacker to perform a man-in-the-middle (MITM) attack. ThreatMetrix is a security library for mobile applications which aims to provide fraud prevention and device identity capabilities. The ThreatMetrix SDK versions prior to 3.2 do not validate SSL certificates on the iOS platform. An affected application will communicate with https://h-sdk.online-metrix.net regardless of whether the connection is secure or not. An attacker on the same network as or upstream from the iOS device may be able to view or modify ThreatMetrix network traffic that should have been protected by HTTPS.


The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL.


The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a \your communication with the server will be encrypted\ statement) which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack a related issue to CVE-2015-3152.


In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices a man-in-the-middle attacker can install any application into the Knox container (without the user's knowledge) by inspecting network traffic from a Samsung server and injecting content at a certain point in the update sequence. This installed application can further leak information stored inside the Knox container to the outside world.


Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D55; 15.1X49 prior to 15.1X49-D110;


Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.


Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.


\Shpock

Boot

Sale

Classifieds\

app

before

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The Shein Group Ltd. \SHEIN - Fashion Shopping\ app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate.


The komoot GmbH \Komoot - Cycling & Hiking Maps\ app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The D-Link NPAPI extension as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


A Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version 1.4 JetNet5310G version 1.4a JetNet5428G-2G-2FX version 1.4 JetNet5628G-R version 1.4 JetNet5628G version 1.4 JetNet5728G-24P version 1.4 JetNet5828G version 1.1d JetNet6710G-HVDC version 1.1e and JetNet6710G version 1.1. An attacker may gain access to hard-coded certificates and private keys allowing the attacker to perform man-in-the-middle attacks.


Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.


An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. The issue involves the \App Store\ component. It allows man-in-the-middle attackers to spoof password prompts.


It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.


The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code by leveraging the lack of the HTTPS protection mechanism.


An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can yield a result \POINT_AT_INFINITY\ when it should not. A man-in-the-middle attacker could use this to interfere with a connection resulting in an attacked party computing an incorrect shared secret. This vulnerability affects Firefox < 55.


The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and trigger the execution of arbitrary code via a crafted certificate.


In PostgreSQL 9.3.x before 9.3.17 9.4.x before 9.4.12 9.5.x before 9.5.7 and 9.6.x before 9.6.3 it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.


OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.


A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp.


An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol which operates on TCP Port 37777 is an unencrypted binary protocol. Performing a Man-in-the-Middle attack allows both sniffing and injections of packets which allows creation of fully privileged new users in addition to capture of sensitive information.


The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3 7.0.1 and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely.


In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS the server's certificate is not verified. Attackers in a privileged network position may be able to launch a man-in-the-middle attack against these connections. TAC databases are used in BIG-IP PEM for Device Type and OS (DTOS) and Tethering detection. Customers not using BIG-IP PEM not configuring downloads of TAC database files or not using HTTP for that download are not affected.


F-Secure Software Updater 2.20 as distributed in several F-Secure products downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the SYSTEM account. Note that when Software Updater is configured to install updates automatically it checks if the downloaded file is digitally signed by default but does not check the author of the signature. When running in manual mode (default) no signature check is performed.


A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified which may allow a remote attacker to access or influence communications between the identified endpoints.


A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.


On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1) 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2) or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA which when exploited may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack despite the attacker not having gained access to the server's private key itself aka a ROBOT attack.


The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.


An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that during SMTP the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enforced this requirement and it was documented to do so. In 2013 upstream issue #5184 this was changed so that the server may decide whether PLAIN is acceptable. The result is that if you set up a man-in-the-middle SMTP server that doesn't advertise STARTTLS and does advertise that PLAIN auth is OK the smtp.PlainAuth implementation sends the username and password.


An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6 where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records.


The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software \Sophos IPSec Client\ 11.04 is a rebranded version of NCP \Secure Entry Client\ 10.11 r32792. A vulnerability in the software update feature of the VPN client allows a man-in-the-middle (MITM) or man-on-the-side (MOTS) attacker to execute arbitrary malicious software on a target user's computer. This is related to SIC_V11.04-64.exe (Sophos) NCP_EntryCl_Windows_x86_1004_31799.exe (NCP) and ncpmon.exe (both Sophos and NCP). The vulnerability exists because: (1) the VPN client requests update metadata over an insecure HTTP connection; and (2) the client software does not check if the software update is signed before running it.


Huawei video applications HiCinema with software of 8.0.3.308; 8.0.4.300 have a permission control vulnerability. Due to improper verification of specific interface an attacker who is on the same network with the user can obtain some information through a man-in-the-middle attack.


The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It appears in the code that these files are downloaded over HTTPS however the api.hubapi.com endpoint redirects to a HTTP url. Because of this behavior an attacker with the ability to man-in-the-middle a developer or system performing a package installation could compromise the integrity of the installation.


The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service the Eview EV-07S GPS Tracker discloses personally identifying information such as GPS data and IMEI numbers to any man-in-the-middle (MitM) listener.


The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


An issue was discovered in St. Jude Medical Merlin@home versions prior to Version 8.2.2 (RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability). The identities of the endpoints for the communication channel between the transmitter and St. Jude Medical's web site Merlin.net are not verified. This may allow a man-in-the-middle attacker to access or influence communications between the identified endpoints.


The Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through 2.1.0 (KSA) for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


An issue was discovered on OnePlus One X 2 3 and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater-script' in OTAs that does not check that the current version is lower than or equal to the given image's. Downgrades can occur even on locked bootloaders and without triggering a factory reset allowing for exploitation of now-patched vulnerabilities with access to user data. This vulnerability can be exploited by a Man-in-the-Middle (MiTM) attacker targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition a physical attacker can reboot the phone into recovery and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off).


The Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle.


The America's First Federal Credit Union (FCU) Mobile Banking app 3.1.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates making it susceptible to man-in-the-middle attacks.


Jenkins 2.73.1 and earlier 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates making it susceptible to man-in-the-middle attacks. This library is widely used as a transitive dependency in Jenkins plugins. The fix for CVE-2012-6153 was backported to the version of commons-httpclient that is bundled in core and made available to plugins.


Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient.


The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate.


The

\Your

Legacy

Federal

Credit

Union

Mobile

Banking\

by

Your

Legacy

Federal

Credit

Union

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks_v4.json file.


The \CFB Mobile Banking\ by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id1081102805 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \BNB Mobile Banking\ by Brady National Bank app 3.0.0 -- aka bnb-mobile-banking/id674215747 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The North Adams State Bank (Ursa) nasb-mobile-banking/id980573797 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \FSBY Mobile Banking\ by First State Bank of Yoakum TX app 3.0.0 -- aka fsby-mobile-banking/id899136434 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\First

Citizens

Bank-Mobile

Banking\

by

First

Citizens

Bank

(AL)

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The \Charlevoix State Bank\ by Charlevoix State Bank app 3.0.1 -- aka charlevoix-state-bank/id1128963717 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

app

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior in which a lack of certificate pinning during the TLS/SSL connection establishing process can result in a man-in-the-middle attack.


The \PCSB BANK Mobile\ by PCSB Bank app 3.0.4 -- aka pcsb-bank-mobile/id1067472090 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\Middleton

Community

Bank

Mobile

Banking\

by

Middleton

Community

Bank

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass integrated clients to read or modify the network communication.


The \Oculina Mobile Banking\ by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

Freedom

First

app

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The

\Blue

Ridge

Bank

and

Trust

Co.

Mobile

Banking\

by

Blue

Ridge

Bank

and

Trust

Co.

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\Algonquin

State

Bank

Mobile

Banking\

by

Algonquin

State

Bank

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\Fountain

Trust

Mobile

Banking\

by

FOUNTAIN

TRUST

COMPANY

app

before

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The

\Community

State

Bank

Lamar

Mobile

Banking\

by

Community

State

Bank

Lamar

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The \Peoples Bank Tulsa\ by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\KC

Area

Credit

Union

Mobile

Banking\

by

K

C

Area

Credit

Union

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The \PCB Mobile\ by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \RVCB Mobile\ by RVCB Mobile Banking app 3.0.0 -- aka rvcb-mobile/id757928895 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\SCSB

Shelbyville

IL

Mobile

Banking\

by

Shelby

County

State

Bank

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The

\First

State

Bank

of

Bigfork

Mobile

Banking\

by

First

State

Bank

of

Bigfork

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\State

Bank

of

Waterloo

Mobile

Banking\

by

State

Bank

of

Waterloo

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The \JMCU Mobile Banking\ by Joplin Metro Credit Union app 3.0.0 -- aka jmcu-mobile-banking/id716065893 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \Oritani Mobile Banking\ by Oritani Bank app 3.0.0 -- aka oritani-mobile-banking/id778851066 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \SVB Mobile\ by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

app

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The

\Pioneer

Bank

Trust

Mobile

Banking\

by

PIONEER

BANK

AND

TRUST

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The

\Morton

Credit

Union

Mobile

Banking\

by

Morton

Credit

Union

app

aka

for

iOS

does

not

verify

certificates

from

SSL

servers

which

allows

man-in-the-middle

attackers

to

spoof

servers

and

obtain

sensitive

information

via

a

crafted

certificate.


The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \HBO Mobile Banking\ by Heritage Bank of Ozarks app 3.0.0 -- aka hbo-mobile-banking/id860224933 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \FNB Kemp Mobile Banking\ by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The \FVB Mobile Banking\ by First Volunteer Bank of Tennessee app 3.1.1 -- aka fvb-mobile-banking/id551018004 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.


The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Acceptance of invalid/self-signed TLS certificates in \Panda Mobile Security\ 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.


The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Acceptance of invalid/self-signed TLS certificates in \Foxit PDF - PDF reader editor form signature\ before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password) in addition to the static authentication token if the user is already logged in.


The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


An issue was discovered on OnePlus One X 2 3 and 3T devices. Due to a lenient updater-script in the OnePlus OTA images and the fact that both ROMs use the same OTA verification keys attackers can install HydrogenOS over OxygenOS and vice versa even on locked bootloaders which allows for exploitation of vulnerabilities patched on one image but not on the other in addition to expansion of the attack surface. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition physical attackers can reboot the phone into recovery and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off).


AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine.


The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA images the fact that both products use the same OTA verification keys and the fact that both products share the same 'ro.build.product' system property attackers can install OTAs of one product over the other even on locked bootloaders. That could theoretically allow for exploitation of vulnerabilities patched on one image but not on the other in addition to expansion of the attack surface. Moreover the vulnerability may result in having the device unusable until a Factory Reset is performed. This vulnerability can be exploited by Man-in-the-Middle (MiTM) attackers targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition physical attackers can reboot the phone into recovery and then use 'adb sideload' to push the OTA.


The Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172 versions before Prague-L31C530B160 versions before Prague-L31C432B180 has a man-in-the-middle (MITM) vulnerability due to the use of the insecure HTTP protocol for theme download. An attacker may exploit this vulnerability to tamper with downloaded themes.


The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data which allows man-in-the-middle attackers to conduct PHP object injection attacks and execute arbitrary PHP code by modifying the client-server data stream. NOTE: some of these details are obtained from third party information.


VMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS LDAP servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update.


SChannel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 lacks the required extended master-secret binding support to ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a \triple handshake attack \ aka \Schannel TLS Triple Handshake Vulnerability.\


Cisco Jabber 10.6.x 11.0.x and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors aka Bug ID CSCuw87419.


Multiple

Cisco

embedded

devices

use

hardcoded

certificates

and

SSH

host

keys

embedded

in

the

firmware

which

allows

remote

attackers

to

defeat

cryptographic

protection

mechanisms

and

conduct

man-in-the-middle

attacks

by

leveraging

knowledge

of

these

certificates

and

keys

from

another

installation

aka

Bug

IDs

and


The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate aka Bug IDs CSCut36742 and CSCut36844.


The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.


CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.


ZTE OX-330P ZXHN H108N W300V1.0.0S_ZRD_TR1_D68 HG110 GAN9.8T101A-B MF28G ZXHN H108N use non-unique X.509 certificates and SSH host keys which might allow remote attackers to obtain credentials or other sensitive information via a man-in-the-middle attack passive decryption attack or impersonating a legitimate device.


ownCloud Desktop Client before 2.0.1 when compiled with a Qt release after 5.3.x does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored which makes it easier for remote attackers to conduct man-in-the-middle (MITM) attacks by leveraging a server using a self-signed certificate. NOTE: this vulnerability exists because of a partial CVE-2015-4456 regression.


Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.


Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors as demonstrated by login information.


CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.


The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data related to the lack of SSL support.


The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.


NTP before 4.2.8p6 and 4.3.x before 4.3.90 when configured in broadcast mode allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.


Mozilla Network Security Services (NSS) before 3.20.2 as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2 does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.


Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not \burn\ a successfully validated one-time password (aka OTP) which allows remote or physically proximate attackers with a target user's login credentials to log in as said user by obtaining the OTP through performing a man-in-the-middle attack between the provider and verifier or shoulder surfing and replaying the OTP in the current time-step.


The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.


The HTTP Strict Transport Security (HSTS) module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the \include subdomains\ directive which causes the HSTS policy to not be applied to subdomains and allows man-in-the-middle attackers to have unspecified impact via unknown vectors.


The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true which allows remote attackers to obtain user credentials via a man-in-the-middle attack.


The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000 PCS6500 and MAG PSC360 8.1 before 8.1r5 8.0 before 8.0r13 7.4 before 7.4r13.5 and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13 when Hardware Acceleration is enabled does not properly validate the Finished TLS handshake message which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.


Samba 3.x and 4.x before 4.1.22 4.2.x before 4.2.7 and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned which allows man-in-the-middle attackers to conduct encrypted-to-unencrypted downgrade attacks by modifying the client-server data stream related to clidfs.c libsmb_server.c and smbXcli_base.c.


The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack a different vulnerability than CVE-2014-3566.


IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation.


The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.


The Siemens COMPAS Mobile application before 1.6 for Android does not properly verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server which might allow attackers to obtain sensitive information via a man-in-the-middle attack.


The Software Update component in Apple iTunes before 12.3 does not properly handle redirection which allows man-in-the-middle attackers to discover encrypted SMB credentials via unspecified vectors.


The TLS protocol 1.2 and earlier when a DHE_EXPORT ciphersuite is enabled on a server but not on a client does not properly convey a DHE_EXPORT choice which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE aka the \Logjam\ issue.


The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data aka Bug ID CSCuu66218.


ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored which allows man-in-the-middle attackers to bypass the user's certificate distrust decision and obtain sensitive information by leveraging a self-signed certificate and a connection to a server using its own self-signed certificate.


Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors aka Bug ID CSCuh19683.


Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request.


The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000 Email Security Appliance (ESA) 8.5.7-042 and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate aka Bug IDs CSCuo29561 CSCuv40466 and CSCuv40470.


The Thycotic Password Manager Secret Server application through 2.3 for iOS does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The TLS implementation in the Cavium cryptographic-module firmware as distributed with Cisco Adaptive Security Appliance (ASA) Software 9.1(5.21) and other products does not verify the MAC field which allows man-in-the-middle attackers to spoof TLS content by modifying packets aka Bug ID CSCuu52976.


Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack a variant of CVE-2014-3566 (aka POODLE).


The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key aka Bug IDs CSCum56133 and CSCum56177.


The SwiftKey language-pack update implementation on Samsung Galaxy S4 S4 Mini S5 and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitation can be combined with CVE-2015-4641 exploitation for man-in-the-middle code execution.


The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.


Barracuda Web Filter before 8.1.0.005 when SSL Inspection is enabled does not verify X.509 certificates from upstream SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.


The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates which allows remote attackers to obtain sensitive information via a man-in-the-middle attack.


The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses aka \Group Policy Security Feature Bypass Vulnerability.\


Barracuda Web Filter 7.x and 8.x before 8.1.0.005 when SSL Inspection is enabled uses the same root Certification Authority certificate across different customers' installations which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship.


Mozilla Firefox before 37.0 does not require an HTTPS session for lightweight theme add-on installations which allows man-in-the-middle attackers to bypass an intended user-confirmation requirement by deploying a crafted web site and conducting a DNS spoofing attack against a mozilla.org subdomain.


Basware Banking (Maksuliikenne) before 9.10.0.0 does not encrypt communication between the client and the backend server which allows man-in-the-middle attackers to obtain encryption keys user credentials and other sensitive information by sniffing the network or modify this traffic by inserting packets into the client-server data stream.


Smartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to obtain sensitive information from encrypted communications via a crafted certificate.


IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console (HMC) certificates only during the pre-login stage which allows man-in-the-middle attackers to spoof devices via a crafted certificate.


wpa_supplicant 2.0-16 does not properly check certificate subject name which allows remote attackers to cause a man-in-the-middle attack.


Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.


The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC.


Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modify transmitted data via unspecified vectors.


** DISPUTED ** The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses the same certificate and private key across different customers' installations which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the Fortinet_Factory certificate and private key. NOTE: FG-IR-15-002 says \The Fortinet_Factory certificate is unique to each device ... An attacker cannot therefore stage a MitM attack.\


Fortinet FortiClient 5.2.028 for iOS does not validate certificates which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate.


Forman before 1.7.4 does not verify SSL certificates for LDAP connections which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate.


The Endpoint Control protocol implementation in Fortinet FortiClient 5.2.3.091 for Android and 5.2.028 for iOS does not validate certificates which makes it easier for man-in-the-middle attackers to spoof servers via a crafted certificate.


The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.


The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream.


IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482.


The Red Hat docker package before 1.5.0-28 when using the --add-registry option falls back to HTTP when the HTTPS connection to the registry fails which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authentication and image data by leveraging a network position between the client and the registry to block HTTPS traffic. NOTE: this vulnerability exists because of a CVE-2014-5277 regression.


The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file a related issue to CVE-2015-1263.


unattended-upgrades before 0.86.1 does not properly authenticate packages when the (1) force-confold or (2) force-confnew dpkg options are enabled in the DPkg::Options::* apt configuration which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors.


rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5 6 and 7 does not properly validate hostnames in X.509 certificates from SSL servers which allows remote attackers to prevent system registration via a man-in-the-middle attack.


The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the \insecure\ option is set in a paste configuration (paste.ini) file regardless of the value which allows remote attackers to conduct man-in-the-middle attacks via a crafted certificate a different vulnerability than CVE-2014-7144.


Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates which allows man-in-the-middle attackers to spoof ProxySG Client Managers and consequently modify configurations and execute arbitrary software updates via a crafted certificate.


The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack.


Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.


The Dictionary app in Apple OS X before 10.10.5 does not use HTTPS which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof word definitions by modifying the client-server data stream.


The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information or modify data via a crafted certificate.


The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with firmware 9.x before 9.3 Build 68.5 10.0 through Build 78.6 10.1 before Build 130.13 10.1.e before Build 130.1302.e 10.5 before Build 55.8 and 10.5.e before Build 55.8007.e makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack a variant of CVE-2014-3566 (aka POODLE).


fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates.


Asterisk Open Source 1.8 before 1.8.32.3 11.x before 11.17.1 12.x before 12.8.2 and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5 11.6 before 11.6-cert11 and 13.1 before 13.1-cert2 when registering a SIP TLS device does not properly handle a null byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.


The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3 as used in the ownCloud iOS Library disables verification of a server hostname against the domain name in the subject's Common Name (CN) of the X.509 certificate which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.


WebKit in Apple Safari before 6.2.8 7.x before 7.1.8 and 8.x before 8.0.8 as used in iOS before 8.4.1 and other products does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof a report by modifying the client-server data stream.


libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10 4.2.x before 4.2.13.3 4.3.x before 4.3.13.1 and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic related to the get_client_master_key and get_client_hello functions.


The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350 RD450 RD550 RD650 and TD350 does not validate server certificates during an \encrypted remote KVM session \ which allows man-in-the-middle attackers to spoof servers.


Oracle MySQL before 5.7.3 Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3 and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack aka a \BACKRONYM\ attack.


Squid 3.2.x before 3.2.14 3.3.x before 3.3.14 3.4.x before 3.4.13 and 3.5.x before 3.5.4 when configured with client-first SSL-bump do not properly validate the domain or hostname fields of X.509 certificates which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.


The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.


Mozilla Network Security Services (NSS) before 3.19 as used in Mozilla Firefox before 39.0 Firefox ESR 31.x before 31.8 and 38.x before 38.1 Thunderbird before 38.1 and other products does not properly determine state transitions for the TLS state machine which allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by blocking messages as demonstrated by removing a forward-secrecy property by blocking a ServerKeyExchange message aka a \SMACK SKIP-TLS\ issue.


HP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices which allows man-in-the-middle attackers to spoof devices and obtain sensitive information via a crafted certificate.


The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation aka a \SMACK SKIP-TLS\ issue.


Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks.


Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate.


The SDK for Komodia Redirector with SSL Digestor as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1 Qustodio for Windows Atom Security Inc. StaffCop 5.8 and other products does not properly verify X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers a different vulnerability than CVE-2015-2077.


FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous export RC4 and possibly other weak ciphers when using TLS to connect to FortiGuard servers which allows man-in-the-middle attackers to spoof TLS content by modifying packets.


Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Remote Desktop Session Host (RDSH) in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly verify certificates which allows man-in-the-middle attackers to spoof clients via a crafted certificate with valid Issuer and Serial Number fields aka \Remote Desktop Session Host Spoofing Vulnerability.\


Mozilla Firefox before 39.0 Firefox ESR 38.x before 38.1 and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog which allows user-assisted man-in-the-middle attackers to bypass intended access restrictions by triggering a (1) expired certificate or (2) mismatched hostname for a domain with pinning enabled.


The SDK for Komodia Redirector with SSL Digestor as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1 Qustodio for Windows Atom Security Inc. StaffCop 5.8 and other products uses the same X.509 certificate private key for a root CA certificate across different customers' installations which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging knowledge of this key as originally reported for Superfish VisualDiscovery on certain Lenovo Notebook laptop products.


Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack a variant of CVE-2014-3566 (aka POODLE).


Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allows attackers to make a McAfee Agent talk with another possibly rogue ePO server via McAfee Agent migration to another ePO server.


The TLS protocol 1.2 and earlier supports the rsa_fixed_dh dss_fixed_dh rsa_fixed_ecdh and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate aka the \Key Compromise Impersonation (KCI)\ issue.


The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream.


ext/mysqlnd/mysqlnd.c in PHP before 5.4.43 5.5.x before 5.5.27 and 5.6.x before 5.6.11 uses a client SSL option to mean that SSL is optional which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack a related issue to CVE-2015-3152.


Tor before 0.1.1.20 uses improper logic to validate the \OR\ destination which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.


The RedCarpet command-line client (rug) does not verify SSL certificates from a server which allows remote attackers to read network traffic and execute commands via a man-in-the-middle (MITM) attack.


fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.