PT-2018-4061 · Twibright+2 · Twibright Links+2

Vincent Danen · Published 2018-02-23 · Updated 2022-12-30 · CVE-2012-6709

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ELinks version 0.12 Twibright Links version 2.3

Description The issue is related to missing SSL certificate validation.

Recommendations For ELinks version 0.12, update to a version that includes proper SSL certificate validation. For Twibright Links version 2.3, update to a version that includes proper SSL certificate validation. As a temporary workaround, consider disabling SSL connections until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALT-PU-2021-3383

ALT-PU-2022-2431

ALT-PU-2022-3440

CVE-2012-6709

Affected Products

Alt Linux

Elinks

Twibright Links

References · 16

• https://errata.altlinux.org/ALT-PU-2022-2431 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-6709 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4545 · Security Note
• https://osv.dev/vulnerability/CVE-2012-6709 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=881399 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6709 · Security Note
• https://ubuntu.com/security/CVE-2012-6709 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6709 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6709 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-6709 · Security Note
• https://errata.altlinux.org/ALT-PU-2022-3440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6709 · Security Note
• https://errata.altlinux.org/ALT-PU-2021-3383 · Vendor Advisory
• https://github.com/nabetaro/elinks/issues/1 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694658 · Note