Vulnerabilities > NV Websocket Client Project

DATE	CVE	VULNERABILITY TITLE	RISK
2017-11-17	CVE-2017-1000209	Improper Certificate Validation vulnerability in Nv-Websocket-Client Project Nv-Websocket-Client The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate. network high complexity nv-websocket-client-project CWE-295	5.9

Vulnerabilities > NV Websocket Client Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"NV Websocket Client Project"}]}