Skip to content

CVE-2016-5655 Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

MediumCVSS 5.9 EPSS 0.57%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

Affected products

ProductAffected versionsFixed in
misys fusioncapital opics plus All versions No fix listed

References

  • VU#682704 third-party-advisory us-government-resource
  • 92035 vdb-entry