Security Advisory
CVE-2009-2381
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Gizmo 3.1.0.79 on Linux does not verify a servers SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate.