1 matches found
Improper Certificate Validation
io.undertow:undertow-core is vulnerable to Improper Certificate Validation. The vulnerability is due to missing certificate validation in the Http2ClientProvider class to check if the identity is presented by the server certificate in HTTPS connections. If the ENDPOINTIDENTIFICATIONALGORITHM is n...
7.5CVSS6.9AI score0.00596EPSS
SaveExploits0References7Affected Software1
20