An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-15522.json"