VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2019-8351

CVE-2019-8351

Description

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

4
  • Heimdalsecurity/Thor3 versions
    cpe:2.3:a:heimdalsecurity:thor:2.5.170:rc:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:heimdalsecurity:thor:2.5.170:rc:*:*:*:*:*:*
    • cpe:2.3:a:heimdalsecurity:thor:2.5.171:*:*:*:*:*:*:*
    • cpe:2.3:a:heimdalsecurity:thor:2.5.172:*:*:*:*:*:*:*
  • Heimdal/Thor agentllm-fuzzy
    Range: <2.5.173

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.