CVE-2012-5524: Gajim

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which allows remote attackers to conduct man-in-the-middle (MITM) attacks and spoof servers via an arbitrary certificate from a trusted CA.

Affected products

• Gajim Gajim: up to and including 0.15.2; version 0.1 only; version 0.2 only; version 0.2.1 only; version 0.3 only; version 0.4 only; …

Published 2014-02-08. Last modified 2026-06-16.