CVE-2019-20455

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.
References
Link Resource
https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0 Patch Release Notes Third Party Advisory
https://github.com/globalpayments/php-sdk/pull/8 Exploit Third Party Advisory
https://github.com/globalpayments/php-sdk/releases/tag/2.0.0 Release Notes Third Party Advisory
https://winterdragon.ca/global-payments-vulnerability/ Exploit Patch Third Party Advisory URL Repurposed
https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0 Patch Release Notes Third Party Advisory
https://github.com/globalpayments/php-sdk/pull/8 Exploit Third Party Advisory
https://github.com/globalpayments/php-sdk/releases/tag/2.0.0 Release Notes Third Party Advisory
https://winterdragon.ca/global-payments-vulnerability/ Exploit Patch Third Party Advisory URL Repurposed
Configurations

Configuration 1 (hide)

cpe:2.3:a:globalpayments:php_sdk:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:38

Type Values Removed Values Added
References () https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0 - Patch, Release Notes, Third Party Advisory () https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0 - Patch, Release Notes, Third Party Advisory
References () https://github.com/globalpayments/php-sdk/pull/8 - Exploit, Third Party Advisory () https://github.com/globalpayments/php-sdk/pull/8 - Exploit, Third Party Advisory
References () https://github.com/globalpayments/php-sdk/releases/tag/2.0.0 - Release Notes, Third Party Advisory () https://github.com/globalpayments/php-sdk/releases/tag/2.0.0 - Release Notes, Third Party Advisory
References () https://winterdragon.ca/global-payments-vulnerability/ - Exploit, Patch, Third Party Advisory, URL Repurposed () https://winterdragon.ca/global-payments-vulnerability/ - Exploit, Patch, Third Party Advisory, URL Repurposed

14 Feb 2024, 01:17

Type Values Removed Values Added
References (MISC) https://winterdragon.ca/global-payments-vulnerability/ - Exploit, Patch, Third Party Advisory (MISC) https://winterdragon.ca/global-payments-vulnerability/ - Exploit, Patch, Third Party Advisory, URL Repurposed

Information

Published : 2020-02-14 16:15

Updated : 2024-11-21 04:38


NVD link : CVE-2019-20455

Mitre link : CVE-2019-20455

CVE.ORG link : CVE-2019-20455


JSON object : View

Products Affected

globalpayments

  • php_sdk
CWE
CWE-295

Improper Certificate Validation