CVE-2019-8351 - Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate

Back Back to CVE browser

CRITICAL

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate

Published Mar 21, 2019

9.1

CRITICAL

CVSS 3.0

EPSS 1.31%

Description

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.31% 0.01305

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 4, 2026.

EPSS probability 0.01305

Score over time

2021-2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (13 key points)

Flat stretches are collapsed. Showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 4, 2026	1.31% (0.01305)	69.53th	v5 (v2026.06.15)
Sep 20, 2026	1.31% (0.01305)	69.25th	v5 (v2026.06.15)
Jul 20, 2024	0.55% (0.00551)	77.72th	v3 (v2023.03.01)
Feb 8, 2024	0.55% (0.00551)	76.82th	v3 (v2023.03.01)
Sep 3, 2023	0.55% (0.00551)	74.61th	v3 (v2023.03.01)
Mar 7, 2023	0.41% (0.00406)	69.68th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Apr 1, 2022	1.05% (0.01055)	48.43th	v2 (v2022.01.01)
Feb 4, 2022	9.03% (0.09029)	86.86th	v2 (v2022.01.01)
Feb 3, 2022	2.30% (0.02304)	53.71th	v1
Jan 6, 2022	2.30% (0.02304)	53.25th	v1
Jan 5, 2022	0.52% (0.00523)	33.47th	v5 (v2026.06.15)
Apr 14, 2021	0.52% (0.00523)	0.00th	v1