PT-2019-11202 · Apache+2 · Apache Mina+2
CVE-2019-0231
·
Publicado
2019-10-01
·
Atualizado
2026-06-17
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Apache MINA versions prior to 2.0.21
Apache MINA versions 2.1.0
Description:
The issue arises from the handling of the close notify SSL/TLS message, which does not result in a connection closure. As a consequence, the server retains the opened socket, and the client may potentially receive clear text messages afterward.
Recommendations:
For Apache MINA version 2.0.20, migrate to version 2.0.21.
For Apache MINA version 2.1.0, migrate to version 2.1.1.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Mina
Debian
Red Os