Home

CVE-2020-13955

Description

HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connect with Druid and Splunk so information leakage may happen when using the respective Calcite adapters. The method itself is in a utility class so people may use it to create vulnerable HTTPS connections for other applications. From Apache Calcite 1.26 onwards, the hostname verification will be performed using the default JVM truststore.

Risk Information

Base Score
5.9
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.784

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-core 1.26.0Windows
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-druid 1.26.0Windows
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-splunk 1.26.0Windows
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-core for Linux 1.26.0Linux
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-druid for Linux 1.26.0Linux
Vulnerabilities CVE-2020-13955 are fixed in Apache-calcite-splunk for Linux 1.26.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234