NetSight
critical9.1

CVE-2019-8351

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensit…

Impact

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

VendorProductAffected versions
HeimdalsecurityThor
Versions 2.5.170, 2.5.171, 2.5.172

Weakness classification

References