In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 8.1 (including) | 8.1 (including) | |
| Android | 9.0 (including) | 9.0 (including) | |
| Android | 10.0 (including) | 10.0 (including) | |
| Android | 11.0 (including) | 11.0 (including) | |
| Red Hat AMQ Streams 2.4.0 | RedHat | okhttp | * |
| Red Hat Data Grid 8.4.2 | RedHat | okhttp | * |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | RedHat | okhttp | * |
| Red Hat OpenShift Dev Spaces 3 Containers | RedHat | devspaces/server-rhel8:3.16-14 | * |
| Red Hat Single Sign-On 7 | RedHat | okhttp | * |
| Red Hat Single Sign-On 7.6 for RHEL 7 | RedHat | rh-sso7-keycloak-0:18.0.7-1.redhat_00001.1.el7sso | * |
| Red Hat Single Sign-On 7.6 for RHEL 8 | RedHat | rh-sso7-keycloak-0:18.0.7-1.redhat_00001.1.el8sso | * |
| Red Hat Single Sign-On 7.6 for RHEL 9 | RedHat | rh-sso7-keycloak-0:18.0.7-1.redhat_00001.1.el9sso | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso76-openshift-rhel8:7.6-22 | * |