| Package | Affected versions | Patched versions |
|---|---|---|
| jsse | = 1.0.3= 1.0.3_01= 1.0.3_02 |
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free