Lucene search
Veracode Vulnerability DatabaseVERACODE:4481HistoryJun 26, 2017 - 8:23 p.m.
Insecure Hostname Verification Defaults
2017-06-2620:23:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
45.2%
httpclient has insecure hostname verification defaults. If a X509HostnameVerifier is not provided, httpclient would default to having no hostname verification.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache httpclient | le | 4.3 |
Related
nvd
nvd
CVE-2013-4366
2017-10-30 19:29:00
cve
cve
CVE-2013-4366
2017-10-30 19:29:00
ubuntucve
ubuntucve
CVE-2013-4366
2017-10-30 00:00:00
osv
osv
Hostname verification in Apache HttpClient 4.3 was disabled by default
2022-05-13 01:25:03
prion
prion
Design/Logic Flaw
2017-10-30 19:29:00
github
github
Hostname verification in Apache HttpClient 4.3 was disabled by default
2022-05-13 01:25:03
debiancve
debiancve
CVE-2013-4366
2017-10-30 19:29:00
cvelist
cvelist
CVE-2013-4366
2017-10-30 19:00:00
