com.palantir.atlasdb.examples:profile-client (>=0.1137.0, <=0.1159.0), com.palantir.atlasdb:atlasdb-api (>=0.1137.0, <=0.1159.0) +60 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.35.final)

io.undertow:undertow-core MAVEN version 2.2.35.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.palantir.atlasdb.examples:profile-client =0.1137.0, =0.1137.0, =0.1137.0, =0.1137.0, =0.1137.0,...

com.palantir.atlasdb.examples:profile-client (>=0.1160.0, <=0.1172.0), com.palantir.atlasdb:atlasdb-api (>=0.1160.0, <=0.1172.0) +144 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.2.36.final)

io.undertow:undertow-core MAVEN version 2.2.36.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.palantir.atlasdb.examples:profile-client =0.1160.0, =0.1160.0, =0.1160.0, =0.1160.0, =0.1160.0,...

CVE-2022-27890

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

CVE-2022-27890

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

Design/Logic Flaw

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

CVE-2022-27890

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

CVE-2022-27890: Improper Validation of Certificate with Host Mismatch

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...

CVE-2022-27890

CVE-2022-27890 concerns the sls-logging component, where hostname verification in TLS certificates was compromised by a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious actor in a privileged network position could abuse this to perform a man-in-the-middle attack, allowing interceptio...

CVE-2022-27890

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack wou...