1 matches found
Improper Certificate Validation
org.opensearch.dataprepper.plugins, opensearch is vulnerable to Improper Certificate Validation. The vulnerability is due to the plugins defaulting to a “trust-all” SSL configuration when no certificate path is provided, which allows an attacker to perform man-in-the-middle interception and...
7.4CVSS6AI score0.00195EPSS
SaveExploits0References6Affected Software3
20