The undertow client is not checking... CVE-2022-4492
-
AV
AC
AU
C
I
A
发布：
2023-02-23
修订：
2023-03-24
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有10条受影响产品信息
