MGASA-2013-0199

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2012-5783
Published: 06 Jul 2013, 14:11
Last modified:16 Apr 2026, 06:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Jul 2013, 14:11
Published
Vulnerability first disclosed
16 Apr 2026, 06:24
Last Modified
Vulnerability information updated

Description

Updated jakarta-commons-httpclient package fixes security vulnerability The Jakarta Commons HttpClient component did not verify that the server hostname matched the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name (CVE-2012-5783).

Affected Systems

  • mageia•jakarta-commons-httpclient

    < 3.1-3.1.mga2

References (3)