CVE-2013-2073 Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.
MediumCVSS 4.3
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/transifex-client(Debian:11) | < 0.9-1 | 0.9-1 |
| transifex | <= 0.8 | No fix listed |
| transifex | = 0.1 | No fix listed |
| transifex | = 0.2 | No fix listed |
| transifex | = 0.3 | No fix listed |
| transifex | = 0.4 | No fix listed |
| transifex | = 0.5 | No fix listed |
| transifex | = 0.6 | No fix listed |
| transifex | = 0.7 | No fix listed |