SSL Certificate Verification Failure in Mercurial 1.6.4 and Earlier Versions

CVE-2010-4237 · MEDIUM Severity

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

Learn more about our Web Application Penetration Testing UK.