CVE-2020-17514

HIGH · CVSS 7.4 EPSS 3.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-05-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-17514

Severity

HIGH

CVSS

7.4

EPSS

3.40%

Apache

Original NVD Description

Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.