VDB

GCVE-110-MAGEIA-2014-347

GCVE-110-MAGEIA-2014-347
Advisory Published
Vulnetix · Advisory published August 25, 2014
Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerability: The Jakarta Commons HttpClient and Apache httpcomponents HttpClient components may be susceptible to a 'Man in the Middle Attack' due to a flaw in the default hostname verification during SSL/TLS when a specially crafted server side certificate is used (CVE-2012-6153).

Affected Products

VendorProductVersionsPlatforms
Mageiajakarta-commons-httpclient0 (affected), 3.1-10.1.mga3 (unaffected)
Mageiahttpcomponents-client0 (affected), 4.2.5-1.mga3 (unaffected)

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›