Threats tagged 'ghsa-q6vx-pc22-rghc'

C-Kermit versions from 8.0.200 up to but not including 11.1.515 have a vulnerability in certificate hostname validation. This flaw allows attackers with a trusted certificate containing wildcard characters to impersonate hosts by exploiting improper matching in the DNS name comparison function. Successful exploitation can lead to interception of credentials and data over Telnet, FTP, and HTTP TLS connections.