Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jsse | Sun | 1.0.3 (including) | 1.0.3 (including) |
| Jsse | Sun | 1.0.3_01 (including) | 1.0.3_01 (including) |
| Jsse | Sun | 1.0.3_02 (including) | 1.0.3_02 (including) |