Apache Thrift versions before 0.23.0 suffer from a security bypass vulnerability due to improper validation of certificates when the certificate's host does not match the expected host. This weakness (CWE-297 and CWE-295) allows an attacker to present a malicious certificate that the software incorrectly accepts, enabling impersonation of trusted entities. The vulnerability affects the integrity and confidentiality of communications by potentially allowing unauthorized access or data disclosure. The issue is fixed in Apache Thrift 0.23.0. Red Hat's advisory confirms the vulnerability and provides updates for affected products, including Cryostat 4 on RHEL 9, with the fix included in recent security updates.

The vulnerability allows remote attackers to bypass certificate validation checks, potentially impersonating legitimate servers or clients. This can lead to unauthorized access or information disclosure. The impact is rated as low confidentiality, low integrity, and low availability impact, but the overall severity is high due to the potential for security bypass without requiring user interaction or privileges.

An official fix is available in Apache Thrift version 0.23.0. Users are strongly recommended to upgrade to this version or later to remediate the vulnerability. Red Hat has released security updates including this fix for affected products such as Cryostat 4 on RHEL 9. No alternative mitigations meeting Red Hat's criteria are currently available. Users should apply the vendor-provided updates as soon as possible.