Skip to content
Sign in
Not rated

CVE-2020-1887 Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to…

Description

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.

Affected products and versions

Product Affected versions Fixed in
osquery 4.2.0 No fix stated
osquery 2.9.0 No fix stated

Other CVEs of osquery

The 3 CVEs of osquery →
CVE-2019-3567 In some configurations an attacker can inject a new executable path into the extensions.load file for osquery and hard… Not rated CVE-2018-6336 An issue was discovered in osquery 7.8 High
Track this CVE