critical9.1
CVE-2019-8351
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensit…
Impact
Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Heimdalsecurity | Thor | Versions 2.5.170, 2.5.171, 2.5.172 |