CVE-2013-4366

CVE-2013-4366

Published · Updated

Follow this CVE+ Monitor httpcomponents-client+ Monitor org.apache.httpcomponents:httpclient

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.3%
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification.
Affected products
n/a · n/a