Security Advisory

CVE-2010-4334

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-01-14 00:00:00

Last updated 2024-08-07 03:43:14

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

← Browse all CVEs View on cve.org ↗