CVE-2022-45197

CVSS V2 None CVSS V3 None
Description
Slixmpp before 1.8.3 lacks SSL Certificate hostname validation in XMLStream, allowing an attacker to pose as any server in the eyes of Slixmpp.
Overview
  • CVE ID
  • CVE-2022-45197
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-12-25T05:15:11
  • Last Modified Date
  • 2023-01-05T13:19:45
Weakness Enumerations
CWE URL
CWE-295 http://cwe.mitre.org/data/definitions/295.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:slixmpp_project:slixmpp:*:*:*:*:*:*:*:* 1 OR 1.8.3
References
Reference URL Reference Tags
https://github.com/poezio/slixmpp/commits/master/slixmpp/xmlstream/xmlstream.py
https://github.com/poezio/slixmpp/tags
https://lab.louiz.org/poezio/slixmpp/-/commit/b60b1b985db928532f97c4f61d6fbc801f0aa7fa
https://lab.louiz.org/poezio/slixmpp/-/commits/master
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-45197
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45197
History
Created Old Value New Value Data Type Notes
2022-12-25 05:15:56 Added to TrackCVE
2022-12-27 14:15:39 2022-12-27T13:48:11 CVE Modified Date updated
2022-12-27 14:15:39 Received Awaiting Analysis Vulnerability Status updated
2022-12-29 18:17:15 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-05 14:15:34 2023-01-05T13:19:45 CVE Modified Date updated
2023-01-05 14:15:35 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-05 14:15:35 Weakness Enumeration new
2023-01-05 14:15:37 CPE Information updated