CVE-2024-8285 Kroxylicious: missing upstream kafka tls hostname verification

A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a successful attack to be performed, the attacker needs to perfor...

Man-in-the-middle Attack

Git is vulnerable to man-in-the-middle attack. The SSL X.509 v3 certificate validation on the IMAP server's certificate does not check that the server's hostname matched the one provided in the CN field of the server's certificate...