tocsin

Debian/commons-httpclient: unknown

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam

Action: Upgrade commons-httpclient to 3.1-10.2 or later.

Affected

introducedfixedlast affected
03.1-10.2-

Fixed versions

3.1-10.2

Sources

published · modified · JSON