CVE-2024-37015

n/a / n/a PUBLISHED

Description (CNA)

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/AdaCore/aws
https://docs.adacore.com/corp/security-advisories/SEC.AWS-0031-v2.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.