CVE-2020-1887 Weak cryptography in Osquery
Attackers can intercept osquery traffic via MITM due to improper TLS SNI validation when no root chain of trust is configured.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-1887?
CVE-2020-1887 is a critical vulnerability in Facebook Osquery, published on 12 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Which versions are affected by CVE-2020-1887?
It affects 1 product.
Products include Linuxfoundation Osquery.
How do I fix CVE-2020-1887?
No fix has been published for CVE-2020-1887 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-1887 being exploited?
There is no known exploitation of CVE-2020-1887 in the wild and no public exploit code.