title: disabled hostname verificiation
description: Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.
problem types: Missing Hostname Verification
affected:
{
product: Apache Fineract
vendor: Apache Software Foundation
versions:
lessThan: 1.5.0, status: affected, version: Apache Fineract, versionType: custom
}