CVE-2019-1231High
Rome SDK Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation. This vulnerability allows an unauthenticated attacker to establish connection with an invalid SSL/TLS server certificate. To exploit this, an attacker would have to Man-In-The-Middle to intercept an established connection. This security update addresses the issue by handling server SSL/TLS certificate validation correctly.
🎯 Affected products1
- Rome SDK 1.4.1
✅ Remediation
KBRelease Notes (Security Update)