Security Advisory
CVE-2020-1887
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.