CVE-2020-17514

Katalog CVE

CVSS 7.4 · High EPSS 3,4%

Kerentanan pada apache fineract. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.

Rincian

Terbit di NVD

27 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

EPSS (30 hari)

3,4% peluang dieksploitasi; lebih tinggi dari 88,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://issues.apache.org/jira/browse/FINERACT-1211 patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2021/05/27/2 mailing list · advisory pihak ketiga
• https://lists.apache.org/thread.html/rc011b25289c8a6e14f8bc6d07e727382a1df3c8cf2aa5369598bbf64%40%3Cdev.finera...