Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25204
HistoryMay 08, 2020 - 5:22 a.m.

Man-in-the-Middle (MitM)

2020-05-0805:22:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

51.5%

Java-Websocket is vulnerable to man-in-the-middle attack. The SSL hostname validation is not enabled by default, allowing an attacker to perform a man-in-the-middle attack to intercept and modify network traffic.

CPENameOperatorVersion
java-websocketle1.4.1

0.002 Low

EPSS

Percentile

51.5%