Perl IO::Socket::SSL 'verify_hostname_of_cert()' Security Bypass Vulnerability

  1. Network Vulnerabilities
  2. General
  3. Perl IO::Socket::SSL 'verify_hostname_of_cert()' Security Bypass Vulnerability
Summary
The IO::Socket::SSL module for Perl is prone to a security- bypass vulnerability because the application fails to properly validate certificate hostnames. Successfully exploiting this issue allows attackers to bypass certain security restrictions, which may aid in further attacks. Versions prior to IO::Socket::SSL 1.26 are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Updated on 2017-03-28
Severity
Medium Severity
Classification
Related Vulnerabilities