Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e2guardian 信任管理问题漏洞
Vulnerability Description
e2guardian是一个Web内容过滤器，可以在代理，透明或icap服务器模式下工作。 e2guardian 存在信任管理问题漏洞，该漏洞源于 e2guardian v5.4.x <= v5.4.3r 受 SSL MITM 引擎中缺少 SSL 证书验证的影响。 在独立模式下（即充当代理或透明代理），启用 SSL MITM 的情况下，e2guardian（如果使用 OpenSSL v1.1.x 构建）不会验证其连接的 Web 服务器证书中的主机名，因此 本身容易受到 MITM 攻击。
CVSS Information
N/A
Vulnerability Type
N/A