CVE-2012-5783 Improper Certificate Validation in Apache Commons HttpClient
MediumCVSS 5.8
EPSS 9.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| commons-httpclient/commons-httpclient(Maven) | >= 3.0 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 20020423 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.0 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.0.1 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-alpha1 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-beta1 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-jenkins-1 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-jenkins-2 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-jenkins-3 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | = 3.1-rc1 | No fix listed |
| debian/commons-httpclient(Debian:12) | < 3.1-10.1 | 3.1-10.1 |
| debian/commons-httpclient(Debian:13) | < 3.1-10.1 | 3.1-10.1 |
| debian/commons-httpclient(Debian:14) | < 3.1-10.1 | 3.1-10.1 |
| apache httpclient | = 3.1 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| commons-httpclient/commons-httpclient(Maven) | >= 3.0, < 4.0 | 4.0 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- RHSA-2017:0868 third-party-advisory vendor-advisory
- apache-commons-ssl-spoofing(79984) third-party-advisory vdb-entry
- github.com product
- issues.apache.org issue-tracking patch vendor-advisory
- openSUSE-SU-2013:0354 broken-link vendor-advisory
- openSUSE-SU-2013:0622 broken-link vendor-advisory
- openSUSE-SU-2013:0623 broken-link vendor-advisory
- openSUSE-SU-2013:0638 broken-link vendor-advisory
- RHSA-2013:0270 broken-link vendor-advisory
- RHSA-2013:0679 broken-link vendor-advisory
- RHSA-2013:0680 broken-link vendor-advisory
- RHSA-2013:0682 broken-link vendor-advisory
- RHSA-2013:1853 broken-link vendor-advisory
- RHSA-2014:0224 broken-link vendor-advisory
- www.cs.utexas.edu technical-description third-party-advisory
- USN-2769-1 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2012-5783 vendor-advisory
- RHSA-2013:0681 broken-link vendor-advisory
- RHSA-2013:1147 broken-link vendor-advisory
- 58073 third-party-advisory vdb-entry
- github.com
- bugs.debian.org issue-tracking