CVE-2020-24715

2020-08-2722:15:10

Google

osv.dev

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName.

CPENameOperatorVersion
scalyr-agent-2eq2.1.5
scalyr-agent-2eq2.0.59
scalyr-agent-2eq2.0.23
scalyr-agent-2eq2.0.13
scalyr-agent-2eq2.0.40
scalyr-agent-2eq2.0.56
scalyr-agent-2eq2.0.54
scalyr-agent-2eq2.0.43
scalyr-agent-2eq2.0.1
scalyr-agent-2eq2.0.41

Name	Operator	Version
scalyr-agent-2	eq	2.1.5
scalyr-agent-2	eq	2.0.59
scalyr-agent-2	eq	2.0.23
scalyr-agent-2	eq	2.0.13
scalyr-agent-2	eq	2.0.40
scalyr-agent-2	eq	2.0.56
scalyr-agent-2	eq	2.0.54
scalyr-agent-2	eq	2.0.43
scalyr-agent-2	eq	2.0.1
scalyr-agent-2	eq	2.0.41