CVE-2013-2319
FileMaker Pro before 12 and Pro Advanced before 12 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2319?
CVE-2013-2319 has a moderate severity level, allowing man-in-the-middle attacks due to improper SSL server certificate verification.
How do I fix CVE-2013-2319?
To fix CVE-2013-2319, upgrade to FileMaker Pro version 12 or later, which includes proper SSL certificate verification.
What are the risks associated with CVE-2013-2319?
The risks include potential data interception and extraction by attackers spoofing SSL servers.
Which versions of FileMaker are affected by CVE-2013-2319?
CVE-2013-2319 affects FileMaker Pro versions prior to 12 and some versions of FileMaker Pro Advanced before 12.
Is CVE-2013-2319 applicable to my FileMaker software?
If you are using any version of FileMaker Pro or Pro Advanced below 12, you are vulnerable to CVE-2013-2319.