Lucene search
GoogleOSV:GHSA-6HRM-JQP3-64CVHistoryApr 13, 2021 - 3:42 p.m.
Improper Certificate Validation in TweetStream
2021-04-1315:42:36
Google
osv.dev
8
tweetstream
certificate validation
eventmachine
tls
man-in-the-middle
attack
software
EPSS
0.001
Percentile
30.3%
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
Related
prion
prion
Input validation
2021-02-19 23:15:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-09-23 00:24:17
cvelist
cvelist
CVE-2020-24393
2021-02-19 22:44:56
osv
osv
CVE-2020-24393
2021-02-19 23:15:12
cve
cve
CVE-2020-24393
2021-02-19 23:15:12
github
github
Improper Certificate Validation in TweetStream
2021-04-13 15:42:36
The little bug that couldn’t: Securing OpenSSL
2021-02-25 19:00:39
nvd
nvd
CVE-2020-24393
2021-02-19 23:15:12
rubygems
rubygems
Improper Certificate Validation in TweetStream
2021-04-12 21:00:00