Unscored CVE-2004-2393 EUVD-2004-2384GHSA-fh9j-p9p3-qmcg

Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which all…

Published Aug 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.

References

1001273 vendor-advisory
11639 third-party-advisory
6299 vdb-entry
10387 vdb-entry
201724 vendor-advisory
sun-jsse-improper-validation(16194) vdb-entry
57560 vendor-advisory
1010193 vdb-entry