CVE-2020-1887

CVE-2020-1887

Vendor Facebook
Product Osquery
Weakness CWE-297
Published March 12, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.

Key dates

02Disclosure timeline

March 12, 2020 CVE published
August 4, 2024 Record updated