CVE-2025-70043

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...

CVE-2025-70043

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...

CVE-2025-70043: Improper Certificate Validation

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...

PT-2026-21520

Name of the Vulnerable Software and Affected Versions Ayms node-To master affected versions not specified Description The application disables TLS/SSL certificate validation by setting rejectUnauthorized to false in TLS socket options. This improper certificate validation could allow for...

CVE-2025-70043

The Ayms node-To master application is vulnerable to CWE-295: Improper Certificate Validation because it explicitly sets the rejectUnauthorized option to false in its TLS socket options . This configuration disables TLS/SSL certificate validation, which may facilitate man-in-the-middle (MITM) att...