CVE record · 1 source
CVE-2026-87758
The remote EJB client does not verify that the hostname of the server it connects to matches the server's TLS certificate.
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-297
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The remote EJB client does not verify that the hostname of the server it connects to matches the server's TLS certificate.
The remote EJB client does not verify that the hostname of the server it connects to matches the server's TLS certificate. An attacker able to intercept network traffic between an EJB client and server can impersonate the server…