4 matches found
CVE-2025-70043
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...
CVE-2025-70043
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...
CVE-2025-70043: Improper Certificate Validation
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in TLS socket options...
CVE-2025-70043
The Ayms node-To master application is vulnerable to CWE-295: Improper Certificate Validation because it explicitly sets the rejectUnauthorized option to false in its TLS socket options . This configuration disables TLS/SSL certificate validation, which may facilitate man-in-the-middle (MITM) att...