CVE-2012-6153

CVE-2012-6153 describes a vulnerability in Apache Commons HttpClient before version 4.2.3, where the software fails to properly validate server hostnames against X.509 certificate subject fields, specifically when the common name is not in the designated CN field. This flaw, an incomplete fix for CVE-2012-5783, allows man-in-the-middle attackers to spoof SSL servers. With a CVSS score of 4.3, this vulnerability is of medium complexity and can lead to information integrity compromise (I:P) via a network attack, but does not impact confidentiality or availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.