CVE-2015-0210
wpa_supplicant: broken certificate subject check
Loading…
Severity
UnknownRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · January 28, 2015
Updated · May 13, 2026
Description
wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.
Statement
Red Hat Product Security determined that this flaw was not a security vulnerability. See the Bugzilla link for more details.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.4AV:N/AC:H/Au:N/C:C/I:N/A:N
CWE not specified