by Kastro
Paper/Archive/CVE-2020-1887

CVE-2020-1887

Facebook Osquery — Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery tra…

EPSS 2%CVSS 9.1
critical.is priorityof 100
42
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 75.4.754 × 2015.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.

Affected

ProductAffectedFixed inSource
Osquery4.2.0–CNA
Osquerynext of 2.9.0 – < unspecifiedunspecifiedCNA
Osquery2.9.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refgithub.com/osquery/osquery/pull/6197reffacebook.com/security/advisories/cve-2020-1887