cve/2022/CVE-2022-48308.md

### [CVE-2022-48308](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48308)
![](https://img.shields.io/static/v1?label=Product&message=sls-logging&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%209.51.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-297%20Improper%20Validation%20of%20Certificate%20with%20Host%20Mismatch&color=brighgreen)

### Description

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service.

### POC

#### Reference
- https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-14.md

#### Github
No PoCs found on GitHub currently.