Scalyr Agent 2 Missing SSL Certificate Validation

2022-05-2417:26:55

Google

osv.dev

0.003 Low

EPSS

Percentile

71.0%

JSON

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName.

CPENameOperatorVersion
scalyr-agent-2eq2.0.15
scalyr-agent-2eq2.1.2
scalyr-agent-2eq2.1.6
scalyr-agent-2eq2.0.59
scalyr-agent-2eq2.1.9
scalyr-agent-2eq2.0.45
scalyr-agent-2eq2.0.48
scalyr-agent-2eq2.0.27
scalyr-agent-2eq2.0.8
scalyr-agent-2eq2.0.43

Name	Operator	Version
scalyr-agent-2	eq	2.0.15
scalyr-agent-2	eq	2.1.2
scalyr-agent-2	eq	2.1.6
scalyr-agent-2	eq	2.0.59
scalyr-agent-2	eq	2.1.9
scalyr-agent-2	eq	2.0.45
scalyr-agent-2	eq	2.0.48
scalyr-agent-2	eq	2.0.27
scalyr-agent-2	eq	2.0.8
scalyr-agent-2	eq	2.0.43