Description
Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate.
References
- 35628 third-party-advisory
- gizmo5-ssl-security-bypass(51399) vdb-entry
- 35508 vdb-entry
- 20090626 Gizmo SSL Certificate Vulnerability mailing-list