Lucene search
GoogleOSV:GHSA-PQWH-44JJ-P5RMHistoryMay 13, 2022 - 1:25 a.m.
Hostname verification in Apache HttpClient 4.3 was disabled by default
2022-05-1301:25:03
Google
osv.dev
15
0.001 Low
EPSS
Percentile
45.2%
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.apache.httpcomponents:httpclient | eq | 4.3 |
Related
cve
cve
CVE-2013-4366
2017-10-30 19:29:00
nvd
nvd
CVE-2013-4366
2017-10-30 19:29:00
ubuntucve
ubuntucve
CVE-2013-4366
2017-10-30 00:00:00
prion
prion
Design/Logic Flaw
2017-10-30 19:29:00
github
github
Hostname verification in Apache HttpClient 4.3 was disabled by default
2022-05-13 01:25:03
debiancve
debiancve
CVE-2013-4366
2017-10-30 19:29:00
cvelist
cvelist
CVE-2013-4366
2017-10-30 19:00:00
veracode
veracode
Insecure Hostname Verification Defaults
2017-06-26 20:23:38
