CVE-2022-27820

2022-03-2404:15:08

Google

osv.dev

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

CPENameOperatorVersion
zaproxyeqw2020-09-01
zaproxyeqw2021-05-31
zaproxyeqw2016-08-30
zaproxyeqw2020-06-24
zaproxyeqw2017-05-15
zaproxyeqw2016-01-11
zaproxyeq1.2.0
zaproxyeqw2018-04-23
zaproxyeqw2021-12-13
zaproxyeqw2017-06-19

Name	Operator	Version
zaproxy	eq	w2020-09-01
zaproxy	eq	w2021-05-31
zaproxy	eq	w2016-08-30
zaproxy	eq	w2020-06-24
zaproxy	eq	w2017-05-15
zaproxy	eq	w2016-01-11
zaproxy	eq	1.2.0
zaproxy	eq	w2018-04-23
zaproxy	eq	w2021-12-13
zaproxy	eq	w2017-06-19