CVE-2020-11050
Improper Validation of Certificate with Host Mismatch in Java-WebSocket
- State
- Published
- Severity
- 9.0 Critical
- Published
- May 7, 2020
- Updated
- Aug 4, 2024
- Reserved
- Mar 30, 2020
Description
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.0 Critical | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H | GitHub_M |
Weaknesses
- CWE-297 Improper Validation of Certificate with Host Mismatch
Affected Products
| Product | Versions |
|---|---|
Java-WebSocketTooTallNate |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.