Lucene search
GoogleOSV:GHSA-PM77-C4Q7-3FWJHistoryOct 12, 2021 - 4:31 p.m.
Improper Certificate Validation in Heartland & Global Payments PHP SDK
2021-10-1216:31:12
Google
osv.dev
6
heartland & global payments
ssl certificate
validation
php sdk
EPSS
0.003
Percentile
69.1%
Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.
References
github.com/globalpayments/php-sdk
github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0
github.com/globalpayments/php-sdk/pull/8
github.com/globalpayments/php-sdk/pull/8/commits/c86e18f28c5eba0d6ede7d557756d978ea83d3c9
github.com/globalpayments/php-sdk/releases/tag/2.0.0
nvd.nist.gov/vuln/detail/CVE-2019-20455
winterdragon.ca/global-payments-vulnerability
Related
cvelist
cvelist
CVE-2019-20455
2020-02-14 15:43:53
osv
osv
CVE-2019-20455
2020-02-14 16:15:09
github
github
Improper Certificate Validation in Heartland & Global Payments PHP SDK
2021-10-12 16:31:12
veracode
veracode
Insecure Certificate Validation
2021-10-13 08:29:10
prion
prion
Design/Logic Flaw
2020-02-14 16:15:00
cve
cve
CVE-2019-20455
2020-02-14 16:15:09
nvd
nvd
CVE-2019-20455
2020-02-14 16:15:09