Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack

CVE-2023-4586

Summary

A security issue has been identified in the Hot Rod client where hostname validation is not enforced during TLS connections. This lack of validation could potentially expose users to man-in-the-middle attacks, allowing malicious actors to intercept or alter communications without detection. Organizations using the Hot Rod client should assess their exposure to this vulnerability and consider implementing protective measures to secure their network traffic.

References