Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.
References
Configurations
Information
Published : 2012-11-04 14:55
Updated : 2017-08-28 18:32
NVD link : CVE-2012-5821
Mitre link : CVE-2012-5821
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
lynx
- lynx