Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Validation of Certificate with Host Mismatch in Java-WebSocket
Vulnerability Description
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对宿主不匹配的证书验证不恰当
Vulnerability Title
Java-WebSocket 信任管理问题漏洞
Vulnerability Description
Java-WebSocket是一款使用Java语言编写的WebSocket客户端和服务器实现。 Java-WebSocket 1.4.1及之前版本中存在信任管理问题漏洞，该漏洞源于WebSocketClient没有验证SSL主机名。攻击者可借助中间人攻击利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A