CVE-2012-5781

no score yetEPSS 0.7%

amazon elastic load balancing: no CVSS score yet. EPSS 0.7% chance of exploitation in the next 30 days.

Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to overriding the default JDK X509TrustManager.

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2012-11-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

amazon:elastic_load_balancing

References

http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf
http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf

Check your stack JSON