CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by d…
Published: 2023-02-23 · CVSS: Unscored
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7