Skip to content
OpenAdvisories

Archive

April 2020

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2020-9488 Public exploit

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…