CVE-2024-2462CWE-297

Allow attackers to intercept or falsify data exchanges between the client and the server

Medium · published June 11, 2024

CVSS v4.0
6.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Allow attackers to intercept or falsify data exchanges between the client

and the server

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:L/SI:N/SA:H
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-297 · Improper Validation of Certificate with Host Mismatch
Published
2024-06-11T12:48Z
EPSS history
Timeline
  • 11 JUN 12:48Z
    Allow attackers to intercept or falsify data exchanges between the client and the server
    cvelistv5