Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-4492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step at least it should b...

7.5CVSS7.1AI score0.00155EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2023/06/29 8:7 p.m.2 views

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

7.5CVSS5.7AI score0.00155EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/10 11:25 a.m.2 views

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

7.5CVSS5.7AI score0.00155EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/03/29 11:44 a.m.2 views

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

7.5CVSS5.7AI score0.00155EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/03/29 11:44 a.m.3 views

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

7.5CVSS5.7AI score0.00155EPSS
Exploits0References4
OSV
OSV
added 2023/02/23 8:15 p.m.5 views

CVE-2022-4492

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step at least it should be performed by default in https and in http/2. I would add it to any TLS client protocol...

7.5CVSS7.4AI score0.00155EPSS
Exploits0References3
OSV
OSV
added 2023/02/23 8:15 p.m.1 views

DEBIAN-CVE-2022-4492

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step at least it should be performed by default in https and in http/2. I would add it to any TLS client protocol...

7.5CVSS6.9AI score0.00155EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/23 12:0 a.m.8 views

CVE-2022-4492

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step at least it should be performed by default in https and in http/2. I would add it to any TLS client protocol...

7.4AI score0.00155EPSS
Exploits0References3
Rows per page
Query Builder