Description

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.

Remediation

References

CVE-2009-3291

Related Vulnerabilities

WordPress Plugin WP Private Content Plus Cross-Site Request Forgery (3.1)

WordPress Plugin wp-football Multiple Cross-Site Scripting Vulnerabilities (1.1)

WordPress Plugin WordPress Infinite Scroll-Ajax Load More Cross-Site Scripting (5.6.0.2)

WordPress Plugin WP-Print Cross-Site Request Forgery (2.51)

MySQL CVE-2021-2170 Vulnerability (CVE-2021-2170)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2009-3291