Homepage
About Snyk

ca.juliusdavies:not-yet-commons-ssl@0.3.9 vulnerabilities

A Java SSL component library

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the ca.juliusdavies:not-yet-commons-ssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Security Bypass

ca.juliusdavies:not-yet-commons-ssl is a Java SSL component library.

Affected versions of this package are vulnerable to Security Bypass. The package does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

How to fix Security Bypass?

A fix was pushed into the master branch but not yet published.

[0.3.11] [0.3.9]
Go back to all versions of this package