Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
CVSS Information
N/A
Vulnerability Type
对宿主不匹配的证书验证不恰当
Vulnerability Title
Facebook osquery 信任管理问题漏洞
Vulnerability Description
Facebook osquery是美国Facebook公司的一款基于SQL的、开源的操作系统检测和监控框架。 Facebook osquery 2.9.0版本至4.2.0版本（不包含2.9.0版本和4.2.0版本）中存在信任管理问题漏洞，该漏洞源于程序没有正确验证TLS SNI主机名。攻击者可通过实施中间人攻击利用该漏洞获取osquery的流量。
CVSS Information
N/A
Vulnerability Type
N/A