Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88190
HistorySep 28, 2022 - 12:00 a.m.

Velneo vClient certificate validation error vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
velneo vclient
certificate validation
vulnerability
enterprise application
mitm attack
user credentials

EPSS

0.001

Percentile

46.7%

Velneo vClient is a complete enterprise application development platform from Velneo. vClient version 28.1.3 contains a certificate validation error vulnerability that stems from a default failure to properly check the authenticity of certificates, which could be exploited by an attacker to perform a MITM attack to obtain a user’s credentials.

EPSS

0.001

Percentile

46.7%

Related for CNVD-2022-88190