Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27195
HistorySep 23, 2020 - 12:24 a.m.

Man-in-the-Middle (MitM)

2020-09-2300:24:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
tweetstream
man-in-the-middle
ssl/tls
eventmachine
vulnerability

EPSS

0.001

Percentile

30.3%

tweetstream is vulnerable to man-in-the-middle (MitM). The vulnerability exists through the insecure usage of eventmachine, where it does not perform validation of hostnames, when initiating SSL/TLS connections.

EPSS

0.001

Percentile

30.3%