CVE-2012-5809
5.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 8.6 / Impact: 4.9
Source: NVD
Description
The Groupon Redemptions application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Affected (1)
Products: Groupon: Groupon Merchants
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Related CWEs
References (2)
Timeline
No history available yet.