Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jboss EAP Vulnerability - CVE-2022-4492 - Vulnerability Database
Jboss EAP

Jboss EAP Vulnerability - CVE-2022-4492

Critical
Reference: CVE-2022-4492
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-4492
Title: Jboss EAP Vulnerability
Overview:

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.