CVE-2023-4586
Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack
A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle (MITM) attack.
CVSS 3.1 · 7.4 High
EPSS < 1%
KEV · Not listed
Vendors
Products