br.com.ingenieux:beanstalk-maven-plugin (1.4.0), br.com.ingenieux:beanstalker-common (1.4.0) +467 more potentially affected by CVE-2013-4366 via org.apache.httpcomponents:httpclient (4.3)

org.apache.httpcomponents:httpclient MAVEN version 4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.httpcomponents:httpclient and may be impacted: - br.com.ingenieux:beanstalk-maven-plugin 1.4.0 - br.com.ingenieux:beanstalker-common 1.4.0...

br.com.ingenieux:beanstalk-maven-plugin (1.4.0), br.com.ingenieux:beanstalker-common (1.4.0) +467 more potentially affected by CVE-2013-4366 via org.apache.httpcomponents:httpclient (4.3)

org.apache.httpcomponents:httpclient MAVEN version 4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.httpcomponents:httpclient and may be impacted: - br.com.ingenieux:beanstalk-maven-plugin 1.4.0 - br.com.ingenieux:beanstalker-common 1.4.0...

CVE-2013-4366

http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification...

DEBIAN-CVE-2013-4366

http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification...

br.com.ingenieux:beanstalk-maven-plugin (1.4.0), br.com.ingenieux:beanstalker-common (1.4.0) +467 more potentially affected by CVE-2013-4366 via org.apache.httpcomponents:httpclient (4.3)

org.apache.httpcomponents:httpclient MAVEN version 4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.httpcomponents:httpclient and may be impacted: - br.com.ingenieux:beanstalk-maven-plugin 1.4.0 - br.com.ingenieux:beanstalker-common 1.4.0...

CVE-2013-4366

CVE-2013-4366 concerns http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1, where the code does not ensure that the X509HostnameVerifier is non-null. This can allow attackers to trigger unspecified impact via vectors involving hostname verification. Connected documents...