Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.31%
Published
Mar 21, 2019
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
Weaknesses (CWE)
Affected Products (3)
References (2)