Platform External Okhttp vulnerabilities

1 known vulnerability affecting platform/external_okhttp.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

UNKNOWN1

Vulnerabilities

Page 1 of 1

CVE-2021-0341UNKNOWN≥ 8.0:0, < 8.0:2021-02-01≥ 8.1:0, < 8.1:2021-02-01+3 more2021-02-01

CVE-2021-0341 CVE-2021-0341: In verifyHostName of OkHostnameVerifier In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.