VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 4, 2012· Updated Apr 29, 2026

CVE-2012-5781

CVE-2012-5781

Description

Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to overriding the default JDK X509TrustManager.

Affected products

11
  • Amazon (company)/Elastic Load Balancing11 versions
    cpe:2.3:a:amazon:elastic_load_balancing:-:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:amazon:elastic_load_balancing:-:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0:1:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.14.3:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.15.1:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.17.0:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:amazon:elastic_load_balancing:1.0.9.3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.