CVE-2019-12855: High severity Twisted Twisted vulnerability
Published Jun 16, 2019
·Updated
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
Affected Software
4 affected componentsFixes available
pip/twisted>=0<19.7.0rc1
19.7.0rc1
Twisted Twisted<=19.2.1
twistedmatrix Twisted<=19.2.1
debian/twisted
20.3.0-7+deb11u120.3.0-7+deb11u222.4.0-4+deb12u124.11.0-125.5.0-5
Remediation
Patch Available
Event History
Jun 16, 2019
CVE Published
via MITRE·11:11 AM
Data Sourced
via MITRE·11:11 AM
Description
Aug 16, 2019
Advisory Published
via GitHub·02:02 PM
Feb 20, 2026
Data Sourced
via Ubuntu·10:40 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:41 PM
Description
Data Sourced
via Debian·10:41 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2019-12855.
2
What is the severity of CVE-2019-12855?
The severity of CVE-2019-12855 is high with a CVSS score of 7.4.
3
What is the affected software?
The affected software is Twisted through version 19.2.1.
4
Is there a fix available for CVE-2019-12855?
Yes, a fix is available in Twisted version 19.7.0 or higher.
5
Where can I find more information about CVE-2019-12855?
You can find more information about CVE-2019-12855 in the following references: [link1], [link2], [link3].