Threats tagged 'cleanstart-2026-ra18069'

A critical security vulnerability exists in the wso2am package due to Apache CXF's Netty-based HTTP client transport not verifying that the hostname in the server's TLS certificate matches the host being called. This flaw affects versions prior to 4.7.0-r5 and can lead to high-impact confidentiality and integrity breaches. The issue has been fixed in version 4.7.0-r5.