title: Hotrod-client: hot rod client does not enable hostname  validation when using tls that lead to a mitm attack
description: A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle (MITM) attack.
problem types: Improper Input Validation
affected:
{
product: hotrod-client
vendor: n/a
defaultStatus: affected
}
{
vendor: Red Hat
product: Red Hat Data Grid 8.4.6
collectionURL: https://access.redhat.com/downloads/content/package-browser/
defaultStatus: unaffected
packageName: hotrod-client
cpe: cpe:/a:redhat:jboss_data_grid:8
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]
workarounds: No current mitigation is yet available for this vulnerability