CVE-2019-20455 - Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations

MEDIUM

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations

Published Feb 14, 2020

5.9

MEDIUM

CVSS 3.1

EPSS 0.98%

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-2239		Advisory
https://github.com/advisories/GHSA-pm77-c4q7-3fwj		Advisory
https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0		x_refsource_MISCPatchRelease NotesThird Party Advisory
https://github.com/globalpayments/php-sdk/pull/8		x_refsource_MISCExploitThird Party Advisory
https://github.com/globalpayments/php-sdk/pull/8/commits/c86e18f28c5eba0d6ede7d557756d978ea83d3c9
https://github.com/globalpayments/php-sdk/releases/tag/2.0.0		x_refsource_MISCRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-20455
https://winterdragon.ca/global-payments-vulnerability/		x_refsource_MISCExploitPatchThird Party AdvisoryURL Repurposed