Lucene search
GoogleOSV:GHSA-2M7G-9Q74-9M3QHistoryMay 06, 2020 - 8:49 p.m.
Improper Certificate Validation in Apache Beam
2020-05-0620:49:04
Google
osv.dev
9
EPSS
0.001
Percentile
38.3%
The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust checking for any code running in the same JVM.
Related
nvd
nvd
CVE-2020-1929
2020-01-15 19:15:13
cvelist
cvelist
CVE-2020-1929
2020-01-15 18:56:55
github
github
Improper Certificate Validation in Apache Beam
2020-05-06 20:49:04
cve
cve
CVE-2020-1929
2020-01-15 19:15:13
prion
prion
Code injection
2020-01-15 19:15:00
osv
osv
CVE-2020-1929
2020-01-15 19:15:13
veracode
veracode
Insecure TLS Configuration
2020-01-16 03:31:03