Debian/undertow: high 7.5
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in
Action: Upgrade undertow to 2.3.8-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.8-2 | - |
Fixed versions
| 2.3.8-2 |
Sources
published · modified · JSON