Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function.
                
            References
                    Configurations
                    Information
                Published : 2012-11-04 14:55
Updated : 2017-08-28 18:32
NVD link : CVE-2012-5821
Mitre link : CVE-2012-5821
JSON object : View
CWE
                
                    
                        
                        CWE-310
                        
            Cryptographic Issues
Products Affected
                lynx
- lynx


