Lucene search
Veracode Vulnerability DatabaseVERACODE:34483HistoryMar 02, 2022 - 9:29 a.m.
Insecure HTTP2 TrustManager
2022-03-0209:29:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
spring-cloud-gateway-server
http2
trustmanager
insecure
default configuration
gateway connections
invalid certificates
EPSS
0
Percentile
15.6%
spring-cloud-gateway-server uses an insecure HTTP2 TrustManager. Application with default configuration and no key store or trusted certificates uses an insecure trustmanager factory option when HTTP2 is enabled, allowing the gateway connections to remote services with invalid or custom certificates.
Related
osv
osv
CVE-2022-22946
2022-03-04 16:15:10
nvd
nvd
CVE-2022-22946
2022-03-04 16:15:10
cve
cve
CVE-2022-22946
2022-03-04 16:15:10
cvelist
cvelist
CVE-2022-22946
2022-03-04 15:50:06
prion
prion
Code injection
2022-03-04 16:15:00
checkpoint_security
checkpoint_security
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00