NetSight
IP …
high7.5

CVE-2021-36377

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

Impact

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.

Affected products

VendorProductAffected versions
Fossil-ScmFossil
before 2.14.2
from 2.15.0 before 2.15.2
FedoraprojectFedora
Version 34

Weakness classification

CWE-295

References