CVE-2020-24714

The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verifyhostname option...

CVE-2020-24714

The CVE-2020-24714 entry concerns Scalyr Agent prior to 2.1.10, which has Missing SSL Certificate Validation because the openssl binary may be invoked without the -verify_hostname option. This can enable Man-in-the-Middle-type exposure for affected deployments (per Veracode description). Public r...