Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: facebook

Published: 2020-03-12T23:50:15

Updated: 2024-08-04T06:54:00.410Z

Reserved: 2019-12-02T00:00:00

Link: CVE-2020-1887

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-03-13T00:15:11.557

Modified: 2024-11-21T05:11:32.900

Link: CVE-2020-1887

cve-icon Redhat

No data.