Lucene search
PRIOn knowledge basePRION:CVE-2022-4492HistoryFeb 23, 2023 - 8:15 p.m.
Default credentials
2023-02-2320:15:00
PRIOn knowledge base
www.prio-n.com
10
undertow
tls client
server identity
https
nvd
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jboss_enterprise_application_platform | eq | 7.0.0 | |
| jboss_fuse | eq | 7.0.0 | |
| migration_toolkit_for_applications | eq | 6.0 | |
| single_sign-on | eq | 7.0 | |
| undertow | eq | 2.7.0 |
Related
veracode
veracode
Improper Certificate Validation
2023-11-09 13:01:24
github
github
redhatcve
redhatcve
CVE-2022-4492
2022-12-14 11:35:13
ubuntucve
ubuntucve
CVE-2022-4492
2023-02-23 00:00:00
osv
osv
nvd
nvd
CVE-2022-4492
2023-02-23 20:15:12
debiancve
debiancve
CVE-2022-4492
2023-02-23 20:15:12
cve
cve
CVE-2022-4492
2023-02-23 20:15:12
cvelist
cvelist
CVE-2022-4492
2023-02-23 00:00:00
ibm
ibm
nessus
nessus
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00