Lucene search

K

Engineer's Toolset Security Vulnerabilities

cve
cve

CVE-2021-35246

The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users.

5.3CVSS

5.2AI Score

0.001EPSS

2022-11-23 05:15 PM
26
4