CVE-2019-11777

State: Published
Severity: Not scored
Published: Sep 11, 2019
Updated: Aug 4, 2024
Reserved: May 6, 2019

Description

In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information.

Scores

The record has no CVSS score.

Weaknesses

CWE-346 Origin Validation Error

Affected Products

Product	Versions
Eclipse PahoThe Eclipse Foundation	1.2.0Affected

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.