CVE-2020-8987 | BDVDB-2026-131813 Detail

Description#

Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man-in-the-middle can host a malicious website using a self-signed certificate. No special action necessary by the victim using AntiTrack with "Allow filtering of HTTPS traffic for tracking detection" enabled. (This is the default configuration.)

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-03-09Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.