Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:30:58 +0000 EUVD-2026-99315 https://cve.radiocsirt.org/vuln/euvd-2026-99315 EUVD-2026-99315 https://cve.radiocsirt.org/vuln/euvd-2026-99315 fkie_cve-2014-3603 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3603 <p>The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p>The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3603 GHSA-rm7v-gqfg-p2wc — Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java https://cve.radiocsirt.org/vuln/ghsa-rm7v-gqfg-p2wc <p><strong>Affected:</strong> Maven: edu.internet2.middleware:shibboleth-identityprovider, Maven: org.opensaml:opensaml</p> <p>The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> <p><strong>Affected:</strong> Maven: edu.internet2.middleware:shibboleth-identityprovider, Maven: org.opensaml:opensaml</p> <p>The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.</p> https://cve.radiocsirt.org/vuln/ghsa-rm7v-gqfg-p2wc gsd-2014-3603 https://cve.radiocsirt.org/vuln/gsd-2014-3603 gsd-2014-3603 https://cve.radiocsirt.org/vuln/gsd-2014-3603