Design/Logic Flaw

2020-06-0816:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.1%

JSON

Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically valid certificate that will be accepted by Java SDK’s Netty component due to missing hostname verification.

CPENameOperatorVersion
couchbase_server_java_sdkge1.7.1
couchbase_server_java_sdklt2.7.1.1

CPE	Name	Operator	Version
	couchbase_server_java_sdk	ge	1.7.1
	couchbase_server_java_sdk	lt	2.7.1.1

References

www.couchbase.com/resources/security

0.001 Low

EPSS

Percentile

36.1%

JSON

Related for PRION:CVE-2020-9040