CVE-2020-24393

Name of the Vulnerable Software and Affected Versions: TweetStream version 2.6.1

Description: The issue allows an attacker to perform a man-in-the-middle attack due to the insecure use of the eventmachine library, which lacks TLS hostname validation.

Recommendations: For TweetStream version 2.6.1, consider disabling the use of the eventmachine library until a secure version is available, or apply a configuration change to enforce TLS hostname validation if possible. At the moment, there is no information about a newer version that contains a fix for this vulnerability.