CVE:CVE-2013-2073
CNNVD:CNNVD-201305-487
Transifex command-line client是Transifex团队开发的一套用于管理翻译的命令行工具。
Transifex command-line客户端0.8及之前版本中存在安全漏洞，该漏洞源于程序没有验证X.509证书。攻击者可借助任意的证书利用该漏洞实施中间人攻击，欺骗Transifex服务器。
solution:Upgrade transifex transifex to a higher version than 0.8,0.1,0.2,0.3,0.4,0.5,0.6,0.7,and avoid the version (,0.8],0.1,0.2,0.3,0.4,0.5,0.6,0.7