CVE-2019-0231

Apache MINA SSLFilter security Issue

State: Published
Severity: Not scored
Published: Oct 1, 2019
Updated: Feb 13, 2025
Reserved: Nov 14, 2018

Description

Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache MINAApache Software Foundation	Apache MINA 2.1 2.1.0Affected Apache MINA 2.0 2.0.21Affected

References

http://mina.apache.org/mina-project/index.html#mina-211-mina-2021-released-posted-on-april-14-2019

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.