CVEs-PoC/2015/CVE-2015-2674.md

CVE-2015-2674

Description

Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.

POC

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1202837
• https://bugzilla.redhat.com/show_bug.cgi?id=1202837

Github

No PoCs found on GitHub currently.