CVE-2025-27809 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client a…
Medium CVSS: 5.4

CVE-2025-27809

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
Vendor
Arm
Product
Mbed Tls
CWE
CWE-1188
Yayın Tarihi
2025-03-25 06:15:41
Güncelleme
2025-07-17 15:57:21
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-1188 Mbed Tls MEDIUM Arm 2025

Referanslar

https://github.com/Mbed-TLS/mbedtls/releases https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-1/ https://github.com/Mbed-TLS/mbedtls/issues/466 https://mastodon.social/@bagder/114219540623402700