Lucene search

K
cvelistRedhatCVELIST:CVE-2021-23214
HistoryMar 04, 2022 - 12:00 a.m.

CVE-2021-23214

2022-03-0400:00:00
CWE-89
redhat
raw.githubusercontent.com
4

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.8%

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.