CVE-2021-23222CWE-522

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption

published March 2, 2022

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01501 · 74.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-03-02T00:00Z
EPSS history
Timeline
  • 02 MAR 00:00Z
    A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption
    cvelistv5