Description

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.

Remediation

References

CVE-2019-12855

Related Vulnerabilities

WordPress Plugin WCFM-Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible Unspecified Vulnerability (6.5.12)

Moodle Incorrect Default Permissions Vulnerability (CVE-2012-1157)

Internet Information Services Other Vulnerability (CVE-2002-0074)

Nexus Repository Manager Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2017-17717)

Magento CVE-2019-8090 Vulnerability (CVE-2019-8090)

Severity

High

Classification

CVE-2019-12855 CWE-295 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities