Code injection

2020-08-2722:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltName.

CPENameOperatorVersion
scalyr_agentlt2.1.10

CPE	Name	Operator	Version
	scalyr_agent	lt	2.1.10

References

scalyr-static.s3.amazonaws.com/technical-details/index.html