CVE-2024-37015
An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is …
Published: 2024-08-13 · CVSS: 7.4 · CVSS 3.1
An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7