Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Undertow Vulnerability - CVE-2022-4492 - Vulnerability Database
Undertow

Undertow Vulnerability - CVE-2022-4492

Critical
Reference: CVE-2022-4492
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-4492
Title: Undertow Vulnerability
Overview:

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.