Red Hat Security AdvisoryRHSA-2014:1098
devtoolset-2-httpcomponents-client security update
Released 2014-08-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Developer Toolset 2 for Red Hat Enterprise Linux 6 Server devtoolset-2-httpcomponents-client-4.2.1-6.el6, devtoolset-2-httpcomponents-client-javadoc-4.2.1-6.el6
- Red Hat Developer Toolset 2 for Red Hat Enterprise Linux 6 Workstation devtoolset-2-httpcomponents-client-4.2.1-6.el6, devtoolset-2-httpcomponents-client-javadoc-4.2.1-6.el6
Fixes 1 record
Priority LOW 29
http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05844 · Published 2014-09-04 · Partial fix · 4.2.3 CWE-20
