CVE-2012-5818

CVE-2012-5818 describes a vulnerability in ElephantDrive where the software fails to validate that the server hostname matches the domain name in an X.509 certificate. This oversight allows man-in-the-middle attackers to spoof SSL servers using any valid certificate. The vulnerability has a CVSS score of 5.8, indicating a medium severity, with an attack vector over the network and medium attack complexity, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, and it has received negligible community discussion or media coverage.