Aller au contenu
Se connecter
Non notée

CVE-2019-10091 When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname…

Description

When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname verification of the entries in the certificate SAN during the SSL handshake. This could compromise intra-cluster communication using a man-in-the-middle attack.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Geode Versions non publiées

Autres CVE de Apache Geode

Les 2 CVE de Apache Geode →
CVE-2017-15694 When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for… Non notée
Suivre cette CVE