ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-17514”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-17514
Published
2021-05-27
CVSS:
7.4
ShadowTrackr CVSS:
8.1
Summary:
Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.