CVE-2022-48308

CVE-2022-48308 describes a vulnerability in Palantir sls-logging where TLS certificate hostnames were not properly verified, stemming from a misuse of the javax.net.ssl.SSLSocketFactory API. This flaw could enable a man-in-the-middle (MitM) attack, allowing an attacker in a privileged network position to intercept, read, or modify sensitive communications. The vulnerability has a CVSS score of 3.7 (LOW) due to its high attack complexity and the requirement for user interaction, with potential for limited confidentiality and integrity impact. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.