CVE-2019-20455

Impact

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0
• https://github.com/globalpayments/php-sdk/pull/8
• https://github.com/globalpayments/php-sdk/releases/tag/2.0.0
• https://winterdragon.ca/global-payments-vulnerability/
• https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0
• https://github.com/globalpayments/php-sdk/pull/8
• https://github.com/globalpayments/php-sdk/releases/tag/2.0.0
• https://winterdragon.ca/global-payments-vulnerability/