Skip to content
fr Sign in
Not rated

CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections

Description

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

Affected products and versions

Product Affected versions Fixed in
Undertow 2.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Undertow

The 14 CVEs of Undertow →
CVE-2022-2764 A flaw was found in Undertow Not rated CVE-2022-1259 A flaw was found in Undertow Not rated CVE-2022-1319 A flaw was found in Undertow Not rated CVE-2021-3859 A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2 Not rated
Track this CVE