Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frc3-7x76-jwp8

Опубликовано: 13 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.

EPSS

Процентиль: 53%
0.003
Низкий

7.4 High

CVSS3

Дефекты

CWE-297

Связанные уязвимости

CVSS3: 7.4
ubuntu
больше 1 года назад

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.

CVSS3: 7.4
nvd
больше 1 года назад

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.

EPSS

Процентиль: 53%
0.003
Низкий

7.4 High

CVSS3

Дефекты

CWE-297