Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-0400

Malware in sbrugna...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 3:17 p.m.•17 views

CVE-2020-1929

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7AI score0.01025EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2020/05/06 8:49 p.m.•88 views

Improper Certificate Validation in Apache Beam

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS2.4AI score0.01025EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/05/06 8:49 p.m.•34 views

GHSA-2M7G-9Q74-9M3Q Improper Certificate Validation in Apache Beam

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/01/16 3:31 a.m.•25 views

Insecure TLS Configuration

Apache Beam MongoDB connector uses insecure TLS configurations. The option to disable SSL trust verification is not properly handled and causes the trust verification to be disabled in all cases. This allows a remote attacker to perform man-in-the-middle attacks against the server...

7.5CVSS3AI score0.01025EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2020/01/15 6:56 p.m.•108 views

CVE-2020-1929

The CVE-2020-1929 entry concerns the Apache Beam MongoDB connector. Affected versions 2.10.0–2.16.0 expose an option to disable SSL trust verification, but the configuration is not respected and disables trust verification in all cases. This exclusion is registered globally, affecting any code ru...

7.5CVSS7.5AI score0.01025EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•5 views

CVE-2020-1929: Improper Certificate Validation

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets registered globally which disables trust...

7.5CVSS7.1AI score0.01025EPSS
SaveExploits0References2
Rows per page
Query Builder