First published: Fri Dec 31 2004(Updated: )
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun Jsse | =1.0.3 | |
Sun Jsse | =1.0.3_02 | |
Sun Jsse | =1.0.3_01 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.