[HTTPCLIENT-1265] Insecure certificate validation CVE-2012-5783

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Affects Version/s: 3.1 (end of life)
• Component/s: HttpClient (classic)
• Environment: All
• Assignee: Unassigned
• Reporter: Alberto Fernández
• Created: 22/Nov/12 23:11
• Updated: 16/Dec/12 22:39
• Resolved: 16/Dec/12 13:08

Description

See.
http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf

Using JSSE you must manually validate server name you're connecting to matches one of the names provided by the certificate. So you can detect a man-in-the-middle type attack with a valid certificado for other site.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5783