Description
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Osquery | 4.2.0, next of 2.9.0 – < unspecified, 2.9.0 | unspecified |