CVE-2020-17514

—

CVSS 3.1

7.4 high

EPSS

3%p88

Published

May 27, 2021 (May 27, 2021)

Modified

Jun 17, 2026

Description

Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.

Vendors: apache
Products: fineract
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news0 stories

No ingested article mentions this CVE yet.