{"id":"CVE-2012-5825","title":"Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary vali…","summary":"Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary vali…","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-20"],"vendor":"tweepy","product":"tweepy","affected":["tweepy < 3.0.0"],"patched":["tweepy 3.0.0"],"published":"2012-11-04","updated":"2026-09-17","sourceUpdated":"2026-09-17T14:22:42.537","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2012-5825","references":[{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","label":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79831","label":"cve@mitre.org"},{"url":"http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79831","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00609,"epssPercentile":0.4754,"ingestedAt":"2026-09-17T15:20:38.952Z","slug":"CVE-2012-5825","body":"## Overview\n\nTweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library.\n\n## Affected\n\n- `tweepy < 3.0.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `tweepy 3.0.0`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":40.7,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}