Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Async-http-client Project Component: Async-http-client Clear all filters
TI-2013-06061 CVE-2013-7398 · GHSA-5c66-6h6g-6q6m

main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC…

Priority LOW 22

main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates, which allows man-in-…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0083 Published 2015-06-24 Partial fix · 1.9.0 CWE-345
TI-2013-06060 CVE-2013-7397 · GHSA-8h53-fjgg-g42g

Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate…

Priority LOW 22

Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-the-middle attackers to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00993 Published 2015-06-24 Partial fix · 1.9.0 CWE-345