Aller au contenu
en Se connecter
Non notée

CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections

Description

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

Produits et versions touchés

Produit Versions touchées Corrigé en
Undertow 2.7 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Undertow

Les 14 CVE de Undertow →
CVE-2022-2764 A flaw was found in Undertow Non notée CVE-2022-1259 A flaw was found in Undertow Non notée CVE-2022-1319 A flaw was found in Undertow Non notée CVE-2021-3859 A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2 Non notée
Suivre cette CVE