Unscored CVE-2001-1569 EUVD-2001-1546GHSA-9mfv-6fm5-297w

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which a…

Published Jul 14, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.

References

wap-gateway-ssl-certificates(6814) vdb-entry
20010709 Many WAP gateways do not properly check SSL certificates mailing-list