CVE-2023-4586
04.10.2023, 11:15
A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle (MITM) attack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | data_grid | 8.0.0 |
| infinispan | hot_rod | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.
References