Unscored CVE-2001-1568 EUVD-2001-1545GHSA-88p5-p62r-9756

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows…

Published Jul 14, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.

References

wap-gateway-ssl-certificates(6814) vdb-entry
20010709 Many WAP gateways do not properly check SSL certificates mailing-list