Lucene search
MitreCVE-2022-45197HistoryDec 25, 2022 - 5:15 a.m.
CVE-2022-45197
2022-12-2505:15:11
CWE-295
mitre
web.nvd.nist.gov
325
2
slixmpp
ssl
certificate
validation
xmlstream
cve-2022-45197
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
44.7%
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Affected configurations
Node
slixmpp_projectslixmppRange<1.8.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| slixmpp_project | slixmpp | * | cpe:2.3:a:slixmpp_project:slixmpp:*:*:*:*:*:*:*:* |
References
Social References
More
Related
nessus
nessus
Fedora 36 : python-slixmpp (2022-20a2dbdd45)
2022-12-22 00:00:00
GLSA-202305-07 : slixmpp: Insufficient Certificate Validation
2023-05-03 00:00:00
mageia
mageia
Updated python-slixmpp packages fix security vulnerability
2022-12-17 21:48:08
fedora
fedora
[SECURITY] Fedora 37 Update: python-slixmpp-1.8.3-1.fc37
2022-11-27 01:32:05
[SECURITY] Fedora 36 Update: python-slixmpp-1.8.3-1.fc36
2022-11-27 01:36:08
osv
osv
PYSEC-2022-43013
2022-12-25 05:15:00
Slixmpp lacks SSL Certificate hostname validation in XMLStream
2022-12-25 06:30:20
veracode
veracode
Improper Input Validation
2023-01-09 06:51:39
freebsd
freebsd
py-slixmpp -- incomplete SSL certificate validation
2022-12-25 00:00:00
github
github
Slixmpp lacks SSL Certificate hostname validation in XMLStream
2022-12-25 06:30:20
ubuntucve
ubuntucve
CVE-2022-45197
2022-12-25 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0469)
2022-12-19 00:00:00
Fedora: Security Advisory for python-slixmpp (FEDORA-2022-20a2dbdd45)
2022-11-27 00:00:00
Fedora: Security Advisory for python-slixmpp (FEDORA-2022-6720bd776b)
2022-11-27 00:00:00
cvelist
cvelist
CVE-2022-45197
2022-12-25 00:00:00
debiancve
debiancve
CVE-2022-45197
2022-12-25 05:15:11
nvd
nvd
CVE-2022-45197
2022-12-25 05:15:11
prion
prion
Input validation
2022-12-25 05:15:00
gentoo
gentoo
slixmpp: Insufficient Certificate Validation
2023-05-03 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
44.7%
Related for CVE-2022-45197