Lucene search
GoogleOSV:ASB-A-171980069HistoryFeb 01, 2021 - 12:00 a.m.
Potential vulnerability in Java TLS Hostname Verification
2021-02-0100:00:00
Google
osv.dev
12
java
tls
hostname verification
vulnerability
remote information disclosure
okhostnameverifier
user interaction
software
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cvelist
cvelist
CVE-2021-0341
2021-02-10 16:50:15
cve
cve
CVE-2021-0341
2021-02-10 17:15:22
prion
prion
Information disclosure
2021-02-10 17:15:00
redhatcve
redhatcve
CVE-2021-0341
2022-12-15 20:04:50
nvd
nvd
CVE-2021-0341
2021-02-10 17:15:22
redhat
redhat
(RHSA-2023:2723) Moderate: Red Hat Data Grid 8.4.2 security update
2023-05-10 13:40:35
(RHSA-2023:0756) Important: Red Hat JBoss Enterprise Application Platform 7.4.9 XP 4.0.0.GA Security release
2023-02-14 11:39:31
(RHSA-2023:2713) Moderate: Red Hat Single Sign-On 7.6.3 security update
2023-05-10 11:57:32
ibm
ibm
nessus
nessus
ics
ics
Siemens SIMATIC
2024-03-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00