← voltar
CVE-2015-3908

CVE-2015-3908

EPSS 0.9%
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.opensuse.org/opensuse-updates/2015-07/msg00051.htmlhttp://lists.opensuse.org/opensuse-updates/2015-08/msg00029.htmlhttps://lists.debian.org/debian-lts-announce/2019/09/msg00016.htmlhttp://www.ansible.com/securityhttp://www.openwall.com/lists/oss-security/2015/07/14/4