CVE-2020-1887

2020-03-1300:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.

CPENameOperatorVersion
osqueryeq2.9.2
osqueryeq4.0.0
osqueryeq1.3.1
osqueryeq1.0.2
osqueryeq1.5.1
osqueryeq1.8.0
osqueryeq2.4.0
osqueryeq1.2.1
osqueryeq1.0.3
osqueryeq1.7.4