PT-2019-10014 · Square+1 · Okhttp+1

CVE-2018-20200 · Publicado 2019-04-18 · Atualizado 2026-05-18

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: OkHttp versions 3.x through 3.12.0

Description: The issue in OkHttp allows man-in-the-middle attackers to bypass certificate pinning. This is achieved by changing SSLContext and boolean values while hooking the application.

Recommendations: For OkHttp versions 3.x through 3.12.0, consider updating to a version where this issue is addressed, if available. As a temporary workaround, restrict modifications to SSLContext to prevent bypassing certificate pinning.

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CLEANSTART-2026-KU61465

CLEANSTART-2026-LE11246

CLEANSTART-2026-RN56220

CVE-2018-20200

Produtos afetados

Debian

Okhttp

Referências · 199

• 🔥 https://cxsecurity.com/issue/WLB-2018120252 · Exploit
• https://github.com/square/okhttp/releases · Nota
• https://github.com/square/okhttp/commits/master · Correção
• https://github.com/square/okhttp/issues/4967 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RN56220.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LE11246.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KU61465.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-42583 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-fghv-69vj-qj49 · Nota
• https://osv.dev/vulnerability/ghsa-xq3w-v528-46rv · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-0341 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-42585 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1320 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-42779 · Nota
• https://lists.apache.org/thread.html/r78bfce980843be61a55615a7680bbf7ac751a9b3515231eab2d32068%40%3Cissues.flink.apache.org%3E · Nota