Read the docs
Red Hat Security Advisory

RHSA-2016:1931

Red Hat JBoss Fuse/A-MQ 6.2.1 security and bug fix update

Released 2016-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 38

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09189 Published 2014-08-21 Partial fix · 4.3.5 CWE-347