PYSEC-2020-252

2020-08-2722:15:00

Google

osv.dev

0.003 Low

EPSS

Percentile

71.0%

JSON

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName.

CPENameOperatorVersion
scalyr-agent-2eq2.1.5
scalyr-agent-2eq2.0.59
scalyr-agent-2eq2.0.40
scalyr-agent-2eq2.0.56
scalyr-agent-2eq2.0.54
scalyr-agent-2eq2.0.43
scalyr-agent-2eq2.0.1
scalyr-agent-2eq2.0.41
scalyr-agent-2eq2.0.5
scalyr-agent-2eq2.0.46

Name	Operator	Version
scalyr-agent-2	eq	2.1.5
scalyr-agent-2	eq	2.0.59
scalyr-agent-2	eq	2.0.40
scalyr-agent-2	eq	2.0.56
scalyr-agent-2	eq	2.0.54
scalyr-agent-2	eq	2.0.43
scalyr-agent-2	eq	2.0.1
scalyr-agent-2	eq	2.0.41
scalyr-agent-2	eq	2.0.5
scalyr-agent-2	eq	2.0.46

Rows per page:

1-10 of 451

References

scalyr-static.s3.amazonaws.com/technical-details/index.html

0.003 Low

EPSS

Percentile

71.0%

JSON

Related for OSV:PYSEC-2020-252