TLS Certificate Verification Vulnerability in Cortex by Unknown Vendor
CVE-2024-41265

Currently unrated

Key Information:

Status
Vendor
CVE Published:
1 August 2024

What is CVE-2024-41265?

A vulnerability has been identified in Cortex version 0.42.1, which involves a flaw in the TLS certificate verification process within the makeOperatorRequest function. This security issue enables attackers to gain unauthorized access to sensitive information, potentially compromising the confidentiality of data transmitted over secure channels. It is crucial for users of affected versions to apply necessary updates and implement enhanced security measures to mitigate risks associated with this vulnerability.

References

Timeline

  • Vulnerability published

.