CVE-2019-1231High

Rome SDK Information Disclosure Vulnerability

Published
September 10, 2019
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation. This vulnerability allows an unauthenticated attacker to establish connection with an invalid SSL/TLS server certificate. To exploit this, an attacker would have to Man-In-The-Middle to intercept an established connection. This security update addresses the issue by handling server SSL/TLS certificate validation correctly.

🎯 Affected products1

  • Rome SDK 1.4.1

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (3)