com.palantir.atlasdb:atlasdb-commons@0.445.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the com.palantir.atlasdb:atlasdb-commons package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Improper Validation of Certificate with Host Mismatch

Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch due to not verifying hostnames in TLS certificates. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service.

How to fix Improper Validation of Certificate with Host Mismatch?

Upgrade com.palantir.atlasdb:atlasdb-commons to version 0.730.0 or higher.

[,0.730.0)