Поиск уязвимостей
Количество 7
Количество 7
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j ...
GHSA-vwqq-5vrc-xw9h
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
BDU:2020-03624
Уязвимость реализации класса SmtpAppender библиотеки журналирования Java-программ Log4j, позволяющая нарушителю реализовать атаку типа «человек посередине»
ALT-PU-2021-4925
ALT-PU-2021-4925: package `log4j` update to version 2.13.3-alt1_1jpp11
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-9488 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1 | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
 | CVE-2020-9488 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1 | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
 | CVE-2020-9488 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1 | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
| CVE-2020-9488 Improper validation of certificate with host mismatch in Apache Log4j ... | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
| GHSA-vwqq-5vrc-xw9h Improper validation of certificate with host mismatch in Apache Log4j SMTP appender | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
 | BDU:2020-03624 Уязвимость реализации класса SmtpAppender библиотеки журналирования Java-программ Log4j, позволяющая нарушителю реализовать атаку типа «человек посередине» | CVSS3: 3.7 | 8% Низкий | больше 6 лет назад |
| ALT-PU-2021-4925 ALT-PU-2021-4925: package `log4j` update to version 2.13.3-alt1_1jpp11 | CVSS3: 3.7 | 8% Низкий | больше 5 лет назад |
Уязвимостей на страницу