CVE-2019-8351: Critical severity heimdal security thor vulnerability
Published Mar 21, 2019
·Updated
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
3 affected components
Heimdalsecurity Thor=2.5.170-rc
Heimdalsecurity Thor=2.5.171
Heimdalsecurity Thor=2.5.172
Event History
Mar 21, 2019
CVE Published
via MITRE·08:28 PM
Data Sourced
via MITRE·08:28 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-8351?
CVE-2019-8351 is classified as a high severity vulnerability due to its potential to allow remote attackers to spoof servers.
2
How do I fix CVE-2019-8351?
To fix CVE-2019-8351, you should upgrade Heimdal Thor Agent to version 2.5.173 or later.
3
What does CVE-2019-8351 affect?
CVE-2019-8351 affects Heimdal Thor Agent versions 2.5.170-rc, 2.5.171, and 2.5.172.
4
What type of attack is possible with CVE-2019-8351?
CVE-2019-8351 enables remote attackers to perform man-in-the-middle attacks due to the lack of certificate verification.
5
Can CVE-2019-8351 lead to data theft?
Yes, CVE-2019-8351 can allow attackers to obtain sensitive information by spoofing the TLS servers.