PT-2018-4061 · Twibright+2 · Twibright Links+2

Vincent Danen · CVE-2012-6709 · Publicado 2018-02-23 · Atualizado 2022-12-30

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ELinks version 0.12 Twibright Links version 2.3

Description The issue is related to missing SSL certificate validation.

Recommendations For ELinks version 0.12, update to a version that includes proper SSL certificate validation. For Twibright Links version 2.3, update to a version that includes proper SSL certificate validation. As a temporary workaround, consider disabling SSL connections until a patch is available.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

ALT-PU-2021-3383

ALT-PU-2022-2431

ALT-PU-2022-3440

CVE-2012-6709

Produtos afetados

Alt Linux

Elinks

Twibright Links

Referências · 16

• https://github.com/nabetaro/elinks/issues/1 · Nota
• https://errata.altlinux.org/ALT-PU-2022-2431 · Aviso do Fabricante
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-6709 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2012-6709 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4545 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2012-6709 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=881399 · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6709 · Nota de Segurança
• https://ubuntu.com/security/CVE-2012-6709 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6709 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6709 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-6709 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2022-3440 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-6709 · Nota de Segurança