CVE-2021-0341

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto

published February 10, 2021

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Published
2021-02-10T16:50Z
EPSS history
Timeline
  • 10 FEB 16:50Z
    In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto
    cvelistv5