CVE-2022-27820

OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

• CWE-295

• http://www.openwall.com/lists/oss-security/2022/03/24/3Mailing List, Third Party Advisory
• https://github.com/zaproxy/zaproxy/releasesRelease Notes, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/23/1Mailing List, Third Party Advisory
• https://github.com/zaproxy/zaproxy/issues/7165Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/03/24/3Mailing List, Third Party Advisory
• https://github.com/zaproxy/zaproxy/releasesRelease Notes, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2022/03/23/1Mailing List, Third Party Advisory

Published

Mar 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27815SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There…7.8
• CVE-2022-27816SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There…7.1
• CVE-2022-27817SWHKD 1.1.5 consumes the keyboard events of unintended users…4.4
• CVE-2022-27818SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. Ther…9.1
• CVE-2022-27819SWHKD 1.1.5 allows unsafe parsing via the -c option. An info…5.3
• CVE-2022-2782In affected versions of Octopus Server it is possible for a …9.1
• CVE-2022-27821Improper boundary check in Quram Agif library prior to SMR A…5.5
• CVE-2022-27822Information exposure vulnerability in ril property setting p…5.5
• CVE-2022-27823Improper size check in sapefd_parse_meta_HEADER_old function…7.1
• CVE-2022-27824Improper size check of in sapefd_parse_meta_DESCRIPTION func…7.1
• CVE-2022-27825Improper size check in sapefd_parse_meta_HEADER function of …7.1
• CVE-2022-27826Improper validation vulnerability in SemSuspendDialogInfo pr…7.8