The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full val…
CVSS 2.0MEDIUM 4.3·Network·No auth·Interaction —·EPSS 0.04246·Published 2011-05-13·Will not fixCWE-20