4 matches found
Insecure Certificate Validation
blackduck is using insecure certificate validation. The vulnerability exists because It does not enforce SSL certificate validation could if the calling code uses either the uploadscan or downloadprojectscans methods...
7.5CVSS1.6AI score0.01126EPSS
SaveExploits1References6Affected Software1
GHSA-F248-V4QH-X2R6 Improper Certificate Validation in blackduck
Synopsys hub-rest-api-python aka blackduck on PyPI version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases...
8.7CVSS7.5AI score0.01126EPSS
SaveExploits1References9
Improper Certificate Validation in blackduck
Synopsys hub-rest-api-python aka blackduck on PyPI version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases...
7.5CVSS7.3AI score0.01126EPSS
SaveExploits1References9Affected Software1
20