Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
TweetStream 2.6.1 uses the library eventmachine in an insecure way that does not have TLS hostname validation. This allows an attacker to perform a man-in-the-middle attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TweetStream 信任管理问题漏洞
Vulnerability Description
Steve Agalloco TweetStream是美国Steve Agallocoe（Steve Agalloco）公司的一个应用软件。提供TweetStream提供对Twitter的Streaming API的简单Ruby访问。 TweetStream 中存在信任管理问题漏洞。该漏洞源于未对 TLS hostnam 进行安全校验，攻击者可通过该漏洞引发中间人攻击。以下产品及版本受到影响：TweetStream 2.6.1。
CVSS Information
N/A
Vulnerability Type
N/A