Security Advisory

CVE-2020-1887

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-12 23:50:15
Last updated 2024-08-04 06:54:00
Assigner facebook
State PUBLISHED

Description

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.