Security Advisory

CVE-2020-1887

9.1
CRITICAL

Vulnerability Description

Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Published Date March 13, 2020
Official Source NIST NVD Advisory