VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 6, 2012· Updated Jun 16, 2026

CVE-2011-5242

CVE-2011-5242

Description

tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Themattharris/Tmhoauth18 versions
    cpe:2.3:a:themattharris:tmhoauth:*:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:themattharris:tmhoauth:*:*:*:*:*:*:*:*range: <=0.60
    • cpe:2.3:a:themattharris:tmhoauth:0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.51:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.52:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.53:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.54:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.55:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.56:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.57:*:*:*:*:*:*:*
    • cpe:2.3:a:themattharris:tmhoauth:0.58:*:*:*:*:*:*:*
    • (no CPE)range: <0.61

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.