7.4
High
CVE-2023-4586 A vulnerability was found in the Hot Rod client
Description
A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle (MITM) attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Data Grid 8.4.6 | Versions not published |
References
- RHSA-2023:7676 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2235564 bugzilla.redhat.com
Timeline
- Published
- Last modified