Approved changes feed: RSS · Atom
cpe:2.3:a:codehaus:xfire:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codehaus (b9b6425d-81c4-5d8c-bb80-114eb1f0593f) |
|---|---|
| Product | Xfire (6f230d2b-cd47-5d62-9b02-8a2e5fc27ae7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:maven/org.codehaus.xfire/xfire-core |
purl2cpe | 2026-06-01 10:13:14.908652 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-5817 |
vulnerable | 2026-06-08 05:02:58.287794 |
Details available
Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Published: 2012-11-04T22:00:00.000Z
Updated: 2024-08-06T21:14:16.382Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.