GHSA-9cxf-vv6j-h6r9

GHSA-9cxf-vv6j-h6r9 PUBLISHED

Record from GitHub Advisory Database · Published April 29, 2022

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

Timeline

Apr 29, 2022 CVE Published
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-9cxf-vv6j-h6r9
vulnetix vdb fixes GHSA-9cxf-vv6j-h6r9

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-9cxf-vv6j-h6r9/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2003-0370 advisory
http://www.debian.org/security/2003/dsa-361 url
http://www.redhat.com/support/errata/RHSA-2003-192.html url
http://www.securityfocus.com/archive/1/320707 url
http://www.securityfocus.com/bid/7520 url
http://www.turbolinux.com/security/TLSA-2003-36.txt url
http://lists.grok.org.uk/pipermail/full-disclosure/2003-May/004983.html url
http://www.kde.org/info/security/advisory-20030602-1.txt url
http://www.redhat.com/support/errata/RHSA-2003-193.html url

Look up in the Resolve Platform →