CVE-2012-5631

High

ipa 3.0 does not properly check server identity before sending credential containing cookies

redhat·CWE-565·Published 2019-11-25

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

92 chars

ipa 3.0 does not properly check server identity before sending credential containing cookies

NVDen

92 chars

ipa 3.0 does not properly check server identity before sending credential containing cookies

NVDes

122 chars

ipa versión 3.0, no comprueba apropiadamente la identidad del servidor antes de enviar credenciales que contienen cookies.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H