Threats tagged 'ghsa-j5xv-pp35-jwf5'

FreeRDP versions prior to 3.32.2 have a vulnerability in the tls_verify_certificate() function where improper certificate validation occurs. The function improperly accepts Common Name fallback despite non-matching Subject Alternative Name (SAN) entries and incorrectly matches IP literals against DNS strings. This flaw allows man-in-the-middle attackers with a certificate from a client-trusted CA to bypass server identity verification and intercept Remote Desktop Protocol (RDP) sessions, including sensitive data such as keystrokes, clipboard contents, and screen display.