Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/07 12:9 a.m.17 views

OpenSearch has ineffective TLS certificate hostname verification

Description A regression was introduced in OpenSearch 2.18.0 that caused the plugins.security.ssl.transport.enforcehostnameverification setting to be ineffective. When this setting was enabled, OpenSearch did not verify that the hostname in a connecting node's TLS certificate matched the hostname...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder