In breve
- CVE-2021-0341 è una vulnerabilità ALTO (CVSS 7.5) che riguarda com.squareup.okhttp3:okhttp.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.88%, superiore al 59.0% delle vulnerabilità.
- Correzione: aggiornare a 4.9.2 o successiva.
Description
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android ID: A-171980069
NVD description
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069
Altre vulnerabilità di com.squareup.okhttp3:okhttp
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free