{"id":"CVE-2017-1000209","details":"The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate.","aliases":["GHSA-4hxv-95rc-jqg7"],"modified":"2026-07-08T11:49:03.801318Z","published":"2017-11-17T02:29:01.097Z","references":[{"type":"ADVISORY","url":"https://github.com/TakahikoKawasaki/nv-websocket-client/pull/107"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/takahikokawasaki/nv-websocket-client","events":[{"introduced":"0"},{"last_affected":"fc6d9fb4d5f64b09e3760345d6245f811150c205"}],"database_specific":{"cpe":"cpe:2.3:a:nv-websocket-client_project:nv-websocket-client:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.2"}],"source":"CPE_RANGE"}}],"versions":["nv-websocket-client-2.2","nv-websocket-client-2.1","nv-websocket-client-2.0","nv-websocket-client-1.31","nv-websocket-client-1.30","nv-websocket-client-1.29","nv-websocket-client-1.28","nv-websocket-client-1.27","nv-websocket-client-1.26","nv-websocket-client-1.25","nv-websocket-client-1.24","nv-websocket-client-1.23","nv-websocket-client-1.22","nv-websocket-client-1.21","nv-websocket-client-1.20","nv-websocket-client-1.19","nv-websocket-client-1.18","nv-websocket-client-1.17","nv-websocket-client-1.16","nv-websocket-client-1.15","nv-websocket-client-1.14","nv-websocket-client-1.13","nv-websocket-client-1.12","nv-websocket-client-1.11","nv-websocket-client-1.10","nv-websocket-client-1.9","nv-websocket-client-1.8","nv-websocket-client-1.7","nv-websocket-client-1.6","nv-websocket-client-1.5","nv-websocket-client-1.4","nv-websocket-client-1.3","nv-websocket-client-1.2","nv-websocket-client-1.1","nv-websocket-client-1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000209.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}