{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-08T06:57:41.791","vulnerabilities":[{"cve":{"id":"CVE-2012-5801","sourceIdentifier":"cve@mitre.org","published":"2012-11-04T22:55:04.047","lastModified":"2026-06-16T23:47:21.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PayPal module in PrestaShop does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP fsockopen function."},{"lang":"es","value":"El módulo PayPal en PrestaShop no comprueba si el nombre del servidor coincide con un nombre de dominio en el Common Name (CN) del asunto o el campo subjectAltName del certificado X.509, lo que permite a atacantes man-in-the-middle falsificar servidores SSL a través de un certificado válido de su elección. Relacionado con el uso de la función PHP fsockopen."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:ebay:-:*:*:*:*:*:*:*","matchCriteriaId":"B4D5E3F1-89A3-4A6D-93AD-81EE79C34DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:prestashop:prestashop:-:*:*:*:*:*:*:*","matchCriteriaId":"DF50286E-4ADA-4A29-B335-3DCB676B690D"}]}]}],"references":[{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}}]}