[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd1zdRj21LYj9MWl02mwgAHTdg45vMeHeUcGd7Ym9C54":3,"g5a-risk:CVE-2018-20200":153},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":102,"weaknesses":103,"weaknessesCount":47,"isActivelyExploited":112,"cisaInfo":15,"otxData":15,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":149,"notableEvents":150},"CVE-2018-20200","What is CVE-2018-20200?","CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https:\u002F\u002Fgithub.com\u002Fsquare\u002Fokhttp\u002Fissues\u002F4967","CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean v...","2019-04-18T19:29:01.347","2024-08-05T12:15:29.357",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.02477,[38,38,38,38,38,38,38],"Medium",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"squareup","okhttp","*","cpe:2.3:a:squareup:okhttp:*:*:*:*:*:*:*:*",1,[49,55,60,63,67,71,74,77,80,83,86,89,92,95,98],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fcxsecurity.com\u002Fissue\u002FWLB-2018120252","Cxsecurity",[53,54],"Exploit","Third Party Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Fsquare\u002Fokhttp\u002Fcommits\u002Fmaster","GitHub",[59,54],"Patch",{"url":61,"source":57,"tags":62},"https:\u002F\u002Fgithub.com\u002Fsquare\u002Fokhttp\u002Fissues\u002F4967",[],{"url":64,"source":57,"tags":65},"https:\u002F\u002Fgithub.com\u002Fsquare\u002Fokhttp\u002Freleases",[66],"Product",{"url":68,"source":69,"tags":70},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","Apache",[],{"url":72,"source":69,"tags":73},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",[],{"url":75,"source":69,"tags":76},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",[],{"url":78,"source":69,"tags":79},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr0dd7ff197b2e3bdd80a0326587ca3d0c22e10d1dba17c769d6da7d7a%40%3Cuser.flink.apache.org%3E",[],{"url":81,"source":69,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr71100f23778d72fbd8be8baa6baffc159b9c4f3fae3db4826bdc8ab8%40%3Cissues.flink.apache.org%3E",[],{"url":84,"source":69,"tags":85},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr78bfce980843be61a55615a7680bbf7ac751a9b3515231eab2d32068%40%3Cissues.flink.apache.org%3E",[],{"url":87,"source":69,"tags":88},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc436d58531754ac8fe20340044566518ea4dce66aeff9193356a225d%40%3Cissues.flink.apache.org%3E",[],{"url":90,"source":69,"tags":91},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E",[],{"url":93,"source":69,"tags":94},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frecce57e195fbdd856dcf1933c136a8a66d7b02e05e3580f44d75a640%40%3Cissues.flink.apache.org%3E",[],{"url":96,"source":69,"tags":97},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfd1eed12ba2a5dff37229edd60fc84a25517815d848994146a15af91%40%3Cissues.flink.apache.org%3E",[],{"url":99,"source":100,"tags":101},"https:\u002F\u002Fsquare.github.io\u002Fokhttp\u002F3.x\u002Fokhttp\u002F","Github",[54],15,[104],{"id":105,"name":106,"description":107,"extendedDescription":108,"status":109,"abstraction":110,"structure":111},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2018-20200? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20200, a medium severity cyber security vulnerability from 2019. CertificatePinner.java in OkHttp 3.x through 3.12.0 allow...","CVE-2018-20200, CVE-2018-20200 vulnerability, CVE-2018-20200 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, squareup security, okhttp vulnerability","\u002Fwhat-is\u002Fcve-2018-20200",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20200","Cybersecurity","CVE-2018-20200, CVE-2018-20200 vulnerability, CVE-2018-20200 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140],{"Operator":15,"Negate":15,"Nodes":141},[142],{"Operator":143,"Negate":15,"CPEMatch":144},"OR",[145],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":147,"VersionEndExcluding":15,"VersionEndIncluding":148},"F6889A8C-87B7-49BE-B316-62267FEF895E","3.0.0","3.12.0",[],[],{"lastModified":11,"cacheTime":152,"version":32},1792263942428,{"score":154,"band":40,"action":155,"scoredAt":156},43,"Plan remediation","2026-10-16T06:46:00.207919+00:00"]