Non notée

CVE-2022-22946 In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store…

Description

In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom certificates.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Spring Cloud Gateway	Versions non publiées

Les 3 CVE de Spring Cloud Gateway →

CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability 10.0 Critique CVE-2021-22051 Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request… Non notée

Vous utilisez Spring Cloud Gateway ?

Suivre cette CVE Surveiller Spring Cloud Gateway Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2022-22946

Chronologie

Publiée 4 mars 2022
Dernière modification 3 août 2024

Références

tanzu.vmware.com tanzu.vmware.com
www.oracle.com www.oracle.com

Suivre cette CVE

CVE-2022-22946 In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store…

Description

Produits et versions touchés

Autres CVE de Spring Cloud Gateway