1 matches found
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
Summary The OpenTelemetry.Exporter.Instana NuGet package does not validate HTTPS/TLS certificates are valid when sending telemetry to a configured Instana back-end when a proxy is configured using the INSTANAENDPOINTPROXY environment variable. If a network attacker can Man-in-the-Middle MitM the...
6.5CVSS5.8AI score0.00207EPSS
SaveExploits0References3Affected Software1
20