VDB
BDU%3A2023-07355
BDU%3A2023-07355
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость сетевого программного средства Netty, связана с ошибками при проверке сертификата TLS, позволяющая нарушителю выполнить атаку типа "человек посередине"
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Apache Software Foundation | Data Grid, netty, hotrod-client |
Timeline
- Nov 1, 2023 CVE Published
References
- https://vuldb.com/ru/?id.238259 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2235564 url
- https://access.redhat.com/security/cve/CVE-2023-4586 url
- https://github.com/opensearch-project/security/issues/3477 url
- https://github.com/jeremylong/DependencyCheck/issues/5912 url
- https://github.com/netty/netty/issues/10806 url
- https://github.com/netty/netty/issues/8537 url
- https://github.com/netty/netty/issues/9930 url
- https://github.com/netty/netty/issues/10362 url