| Package | Affected versions | Patched versions |
|---|---|---|
| tmhoauth | = 0.11= 0.12= 0.13= 0.14= 0.2= 0.3= 0.4= 0.5= 0.51= 0.52= 0.53= 0.54= 0.55= 0.56= 0.57= 0.58≤ 0.60 |
tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free