CVE-2012-5803: The Authorize.Net module in Ubercart does not verify that the server hostname matches a domain name in the...

Security readout for executives and security teams

This flaw affects the Ubercart Authorize.Net payment module’s SSL certificate checking. It may accept a valid certificate for the wrong hostname, which can let a network man-in-the-middle impersonate the payment server. The source bundle does not identify affected versions, a patch, or active exploitation. Exposure is most likely on legacy Drupal/Ubercart installations using the Authorize.Net module for payment gateway communication. The provided sources list no specific versions, package names, or CPEs, so asset confirmation is required. Prioritize review if this module supports live payment processing. Business risk is payment-channel impersonation, but urgency is constrained by missing version, patch, and exploitation evidence in the provided sources. Mitigation focus: Inventory Drupal/Ubercart sites and confirm whether the Authorize.Net payment module is installed.; Check Ubercart or Drupal vendor guidance for fixed releases or supported migration advice.; Upgrade or replace the module if vendor guidance identifies a fixed or supported version..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.