Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-12105
5.9
MEDIUMCVSS v3
Published
April 23, 2020
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.
openconnect/openconnectGitLabOpen client for Cisco AnyConnect, Juniper, Pulse, GlobalProtect, F5, Fortinet and Array Networks (IBM Cloud) VPNs
GitLabOpen client for Cisco AnyConnect, Juniper, Pulse, GlobalProtect, F5, Fortinet and Array Networks (IBM Cloud) VPNs<= 8.08NVD
Docker Hub