FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

httpclient -- Improper Certificate Validation

Affected packages
3.1	<=	apache-commons-httpclient
3.1	<=	jakarta-commons-httpclient

Details

VuXML ID	de3f0385-7c37-11f1-8dc2-dca632daf43b
Discovery	2012-04-11
Entry	2026-07-10

MITRE reports:

Apache Commons HttpClient 3.x, as used in ..., does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

[source]

References

CVE Name	CVE-2012-5783
URL	https://nvd.nist.gov/vuln/detail/CVE-2012-5783