Security Advisory
CVE-2015-5262
4.3
Vulnerability Description
http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.
Published Date
October 27, 2015
Official Source
NIST NVD Advisory