Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Io-socket-ssl Clear all filters
TI-2010-04067 CVE-2010-4334 · GHSA-rgc7-283p-45vh

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open…

Priority LOW 22

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass int…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01777 Published 2011-01-14 Will not fix CWE-310
TI-2009-02881 CVE-2009-3024 · GHSA-5v53-7q2j-vjr2

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL…

Priority LOW 22

The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00996 Published 2009-08-31 No fix listed CWE-310