Lucene search
Redhat.comRH:CVE-2022-4492HistoryDec 14, 2022 - 11:35 a.m.
CVE-2022-4492
2022-12-1411:35:13
redhat.com
access.redhat.com
30
undertow
https
server certificate
flaw
cve-2022-4492
http/2
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
39.4%
A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step ( that should at least be performed by default) in HTTPS and in http/2.
Related
github
github
veracode
veracode
Improper Certificate Validation
2023-11-09 13:01:24
ubuntucve
ubuntucve
CVE-2022-4492
2023-02-23 00:00:00
debiancve
debiancve
CVE-2022-4492
2023-02-23 20:15:12
prion
prion
Default credentials
2023-02-23 20:15:00
cvelist
cvelist
CVE-2022-4492
2023-02-23 00:00:00
cve
cve
CVE-2022-4492
2023-02-23 20:15:12
nvd
nvd
CVE-2022-4492
2023-02-23 20:15:12
osv
osv
ibm
ibm
nessus
nessus
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
39.4%
Related for RH:CVE-2022-4492