CVE-2020-1887

Description: Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Affected Versions: Improper Validation of Certificate with Host Mismatch (CWE-297)
Last Updated: 2020-03-22